[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[gopher] Re: [Bug 71916] security problem with gopher and arbitary ports



On Mon, Jul 22, 2002 at 08:25:05PM -0500, Aaron J. Angel wrote:

I think you may have missed some of the sarcasm and rhetorical questions in
my message, so I'll just omit replies to those...

> The point was Gopher URLs and (ab)using the Gopher protocol can be used
> to simulate virtually any protocol, including SMTP (read down a little
> further on the comments, there's an example with SMTP).

It's pretty trivial to do that with IMAP too, since "GET " forms the
beginning of any IMAP command.

> I think I'll go check up on bug reports, and see if one hasn't already
> been submitted regarding the buggy Gopher URL bugfix.

Good idea.

-- John

-- 
John Goerzen <jgoerzen@complete.org>    GPG: 0x8A1D9A1F    www.complete.org


Reply to: