PDA

View Full Version : SECURITY.NNOV: Special device access in The Bat!


Zhen-Xjell
February 27th, 2002, 10:53 PM
http://online.securityfocus.com/archive/1/258628

{QUOTE-> Details:

The * Bat! * has special device access bug. If The Bat! is configured to
save attachment apart from message bodies and file has a name of special
device *The *Bat! *will attempt to open special device. This kind of bug
was *described *in *[1]. *This *bug *was probably reintroduced in one of
latest version, because our previous test with this product 6 months ago
failed.

It's *not *clear at that moment if it's possible to write special device
(for example to send attached file to printer or COM port), but this bug
definitely *can *be *used *as *a DoS attack against The Bat!. After this
message *The *Bat! stops receiving of any messages (sometimes absolutely
silent, sometimes warning displayed that file can't be open).
<-QUOTE}

Checkout
February 28th, 2002, 04:39 AM
What on Earth is a "special device"?

UNICRON
February 28th, 2002, 05:44 AM
from the article (not encrypted):

{QUOTE-> It's *not *clear at that moment if it's possible to write special device
(for example to send attached file to printer or COM port) <-QUOTE}