> > That's the assumption, but which Unixen legitimately traverses based
> > on a name like .qmail-../../../etc/passwd?
> 
> The dash field need not be "-".  In particular, it can end in "/", so
> that ".." in ext would work, if left unaltered.

Understand, but I can't seem to get past the OS wanting the first
component to be a directory. I guess if people had a .qmail
directory... But is there a way without the recipient doing something
silly?


Regards.

Reply via email to