Gossamer Forum
(Advanced Search)
for
Home : Products : Gossamer Mail : Discussion :

Re: [Mama] Gossamer Mail in Headers = Security Issue

Jul 25, 2002, 3:42 PM
brewt
Staff (4101 posts)
brewt's avatar
Jul 25, 2002, 3:42 PM
Views: 4893
Shortcut
Quote Reply
Re: [Mama] Gossamer Mail in Headers = Security Issue In reply to
Actually the value for the X-Loop/X-GLoop header doesn't matter. incoming.pl only checks for the existence of the header itself, so you can change the value to anything you want. I did a grep through the code and these are the lines I found you would need to change:
Code:
batch/outgoing.pl:182: $top->set('X-GLoop' => 'Gossamer Mail');
batch/outgoing.pl:183: $top->set('X-Loop' => 'Gossamer Mail');
batch/outgoing.pl:281: $head->set('X-GLoop' => 'Gossamer Mail');
batch/outgoing.pl:282: $head->set('X-Loop' => 'Gossamer Mail');
batch/outgoing.pl:376: $head->set('X-GLoop' => 'Gossamer Mail');
batch/outgoing.pl:377: $head->set('X-Loop' => 'Gossamer Mail');
Which corresponds with your findings.

Adrian
Subject Author Views Date
Thread Gossamer Mail in Headers = Security Issue Mama 5005 Jul 24, 2002, 8:03 AM
Thread Re: [Mama] Gossamer Mail in Headers = Security Issue 		Alex 4946 Jul 24, 2002, 9:10 AM
Thread Re: [Alex] Gossamer Mail in Headers = Security Issue 		Mama 4942 Jul 24, 2002, 9:14 AM
Post Re: [Mama] Gossamer Mail in Headers = Security Issue 		Paul 4906 Jul 24, 2002, 9:19 AM
Thread Re: [Alex] Gossamer Mail in Headers = Security Issue 		Mama 4898 Jul 24, 2002, 10:28 PM
Thread Re: [Mama] Gossamer Mail in Headers = Security Issue 		brewt 4893 Jul 25, 2002, 3:42 PM
Post Re: [brewt] Gossamer Mail in Headers = Security Issue 		Mama 4874 Jul 25, 2002, 7:08 PM
Thread Re: [brewt] Gossamer Mail in Headers = Security Issue 		ryel01 4877 Jul 26, 2002, 4:47 PM
Post Re: [ryel01] Gossamer Mail in Headers = Security Issue 		brewt 4839 Jul 28, 2002, 2:59 PM