4 ms·
I'm guessing that they didn't test this on qmail because it is not vulnerable.
by lightlyused 11y ago
I'm guessing that they didn't test this on qmail because it is not vulnerable.
- amluto 11y agoDid you actually read the article, or are you just randomly claiming that qmail is superior? This is an attack against the SMTP protocol that is run through an SMTP client library. There is very little that an MTA could do to mitigate the attack. AFAIK qmail doesn't have an API that accepts untrusted input like this. It could be interesting to see whether there are similar attacks against local MTAs in which a malformed email ends up sending unexpected requests to the remote server when the local server tries to deliver it, but that's not what the article is about.