Path: utzoo!censor!geac!torsqnt!jarvis.csri.toronto.edu!cs.utexas.edu!wuarchive!decwrl!ucbvax!thumper.bellcore.com!nsb From: nsb@thumper.bellcore.com (Nathaniel Borenstein) Newsgroups: comp.soft-sys.andrew Subject: Re: letter-bomb with tm! Message-ID: <0Zuzsq60M2YtQIaKFV@thumper.bellcore.com> Date: 28 Feb 90 16:37:10 GMT References: Sender: daemon@ucbvax.BERKELEY.EDU Organization: The Internet Lines: 11 Excerpts from internet.info-andrew: 27-Feb-90 letter-bomb with tm! Bill Janssen@parc.xerox. (179) > It is possible to embed a tm object in a message, with an attached > command. When the message is read, the command will be executed. > Luckily, it often seems to core-dump. If this is true -- and I'm not sure how to reproduce it -- it is sufficiently serious that I think it should be patched, even if tm isn't a supported program. This is aTrojan horse you could drive a truck through! But how can you attach a command to a tm?