Re: Exim cracking attempt

Marc Haber via Exim-users <[email protected]> Wed, 22 Jul 2026 10:27:06 +0200
Newsgroups gmane.mail.exim.user
Message-ID <[email protected]>
On Wed, Jul 22, 2026 at 09:15:57AM +0100, Jeremy Harris via Exim-users wrote:
>On 2026/07/22 8:54 AM, Marc Haber via Exim-users wrote:
>>On Wed, Jul 22, 2026 at 08:16:57AM +0300, Lena--- via Exim-users wrote:
>>>A cracking attempt specifically targeting Exim:
>>
>>I might be stupid, but where is this specifically targeting Exim?
>
>It's trying to use Exim string-expansion syntax in the local-part of
>the envelope recipient address.

That was a classic case of ENOTENOUGHCOFFEE. The "<$" led me down the 
wrong alley to some shell expansion hack (while the < is obviously the 
introduction of the mail address, idiot me) and the run was sent down 
that wrong way as well in my mind. Sorry.

I'll find my way out myself.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at https://www.exim.org/
## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki