[Full-Disclosure] Corsaire Security Advisory - Multiple vendor MIME field multiple occurrence issue
Florian Weimer
fw at deneb.enyo.de
Tue Sep 14 08:23:03 BST 2004
> The first of the four would be the correct behaviour for a security
> conscious product, but based on empirical research this is not the
> common result.
Of course, this violates the robustness principle.
Are there any estimates how much (corporate) mail contains one of the
format violations you described? I could image that you can't reject
some of them because they are too widespread.
Full-Disclosure is hosted and sponsored by Secunia.