SecurityFocus

Is predictable spam filtering a vulnerability? Jun 16 2004 11:26AM
R Armiento (rar_bt armiento se) (7 replies)

Re: Is predictable spam filtering a vulnerability? Jun 17 2004 06:55PM
Gadi Evron (ge linuxbox org)

Re: Is predictable spam filtering a vulnerability? Jun 17 2004 05:27PM
Joel Eriksson (je-secfocus bitnux com) (3 replies)

On Wed, Jun 16, 2004 at 01:26:28PM +0200, R Armiento wrote:
[snip]
> For example: attacker 'A' sends 'B' a social engineering request
> for "the secret plans" and says "if you are unsure, forward my
> request to your boss and ask if this is okay". 'B' forwards the
> email to his boss 'C' and asks "Is this okay?". However, 'C':s
> spam filter silently drops the email. 'A' forges a reply from
> 'C' saying: "Sure, no problem, go ahead."

Many will probably discard the above as farfetched or ignore it
since it's not a "real" vulnerability that gives remote root to
the attacker, I think it's beautiful though. :)

Security is a state of mind, a way of thinking. Vulnerabilities
are all around us and the one you point out above is certainly
one of them.

> Regards,
> R. Armiento

--
Best Regards,
Joel Eriksson
-------------------------------------------------
Cellphone: +46-70 228 64 16 Home: +46-26-10 23 37
Security Research & Systems Development at Bitnux
PGP Key Server pgp.mit.edu, PGP Key ID 0x08811B44
DF38 5806 0EFB 196E E4B6 34B5 4C01 73BB 0881 1B44
-------------------------------------------------

[ reply ]

Re: Is predictable spam filtering a vulnerability? Jun 18 2004 08:57PM
Jason Coombs (jasonc science org)

Re: Is predictable spam filtering a vulnerability? Jun 18 2004 06:52PM
PSE-L mail professional org (Sean Straw / PSE)

Re: Is predictable spam filtering a vulnerability? Jun 18 2004 06:51PM
Bill Burge (bill burge com)

Re: Is predictable spam filtering a vulnerability? Jun 17 2004 05:04PM
krispykringle gentoo org

RE: Is predictable spam filtering a vulnerability? Jun 17 2004 02:18PM
Aaron Cake (aaron vltpm com) (1 replies)

Re: Is predictable spam filtering a vulnerability? Jun 21 2004 01:23PM
Chris Brown (chris wavetex com)

Re: Is predictable spam filtering a vulnerability? Jun 17 2004 11:28AM
David F. Skoll (dfs roaringpenguin com) (4 replies)

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 22 2004 02:20PM
Martin Maèok (martin macok underground cz) (2 replies)

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 24 2004 07:15AM
Valdis Kletnieks vt edu

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 23 2004 12:53AM
David F. Skoll (dfs roaringpenguin com) (2 replies)

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 23 2004 10:46PM
der Mouse (mouse Rodents Montreal QC CA)

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 23 2004 09:48PM
PSE-L mail professional org (Sean Straw / PSE) (2 replies)

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 25 2004 07:49PM
der Mouse (mouse Rodents Montreal QC CA)

Re: Is predictable spam filtering a vulnerability? (silently dropping messages) Jun 25 2004 05:35PM
Seth Breidbart (sethb panix com)

Re: Is predictable spam filtering a vulnerability? Jun 20 2004 01:52PM
Luca Berra (bluca comedia it) (3 replies)

Re: Is predictable spam filtering a vulnerability? Jun 24 2004 08:32PM
Michael A. Dickerson (mikey singingtree com)

Re: Is predictable spam filtering a vulnerability? Jun 24 2004 07:19AM
Valdis Kletnieks vt edu

Re: Is predictable spam filtering a vulnerability? Jun 23 2004 05:07PM
PSE-L mail professional org (Sean Straw / PSE) (2 replies)

Re: Is predictable spam filtering a vulnerability? Jun 24 2004 07:42PM
The Fungi (fungi yuggoth org)

Re: Is predictable spam filtering a vulnerability? Jun 24 2004 05:44PM
John Fitzgibbon (bugtraq jfitz com) (1 replies)

Re: Is predictable spam filtering a vulnerability? Jun 25 2004 05:08AM
PSE-L mail professional org (Sean Straw / PSE)

Re: Is predictable spam filtering a vulnerability? Jun 19 2004 02:56PM
Kyle Wheeler (kyle-bugtraq memoryhole net)

Re: Is predictable spam filtering a vulnerability? Jun 19 2004 12:49AM
Jon Fiedler (jmf9 cwru edu) (1 replies)

Re: Is predictable spam filtering a vulnerability? Jun 19 2004 01:29AM
David F. Skoll (dfs roaringpenguin com)

RE: Is predictable spam filtering a vulnerability? Jun 17 2004 08:26AM
Hamlesh Motah (admin hamlesh com)

Re: Is predictable spam filtering a vulnerability? Jun 17 2004 08:21AM
Ilya Sher (ilya79 actcom net il)