The mailing list for listmasters using Sympa

[Mohammed Sameer Shaikh <address@concealed>]

Hey,

Nopes I am not using debain, its a centos install.

- Muhammed Sameer

On Mon, Sep 27, 2010 at 1:32 PM, Paul Menzel <address@concealed> wrote:

Dear Mohammed,


Am Montag, den 27.09.2010, 11:47 +0530 schrieb Mohammed Sameer Shaikh:

> * I am running sympa 5.4.3
>
> * When someone sends a mail to my sympa listserv with a Subject line  as

> below, sympa.pl crashes <http://sympa.pl/>

>
> <s>
> Subject:
> =?gb18030?B?Rnc6IM7SysdyY8DPtPrA7bLOvNM51MK02c/608W73cLrJ25hbTM5ODQn?=
> </s>
>
>
> * The error that I get is
>
> <s>
> Can't call method "encode" on an undefined value at
> /usr/lib/perl5/vendor_perl/5.8.8/MIME/Charset.pm line 629.
> </s>
>
> * I tried to patch my sympa install with the patch here
>
> https://sourcesup.cru.fr/tracker/index.php?func=detail&aid=6385&group_id=23&atid=167
>
>
> * Still my sympa keeps crashing.
>
> * I have notices one common thread in all of these mails, ie all of them
> come from blackberry users, and possibly have Chinese characters in them.
>
> * Is there a way to get around this ?

sorry, I cannot help you. I am guessing you are running Debian Lenny,
are not you? If yes you should definitely report that to the Debian BTS
as a security issues [1], since as far as I can see this sounds like a
possible denial of service (DoS) attack.


Thanks,

Paul


[1] http://www.debian.org/security/faq#contact