Behrooz_Ice
08-30-2004, 03:46 PM
This paper provides an overview about an unchecked feature of the SMTP protocol, called 'Message-ID:'; unfortunately, this little feature may be required, thus making its removal difficult. Exploits may include: text-based steganography (I currently have a proof-of-concept process, although kludgy, *does* work) to hidden activation or deactivation codes of malicious or hidden code within aany MIME-encapsulated header. Enjoy!