[
https://issues.apache.org/jira/browse/JAMES-3572?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17851693#comment-17851693
]
Benoit Tellier commented on JAMES-3572:
---------------------------------------
Well in the face of SMTP smuggling, Apache James took a stricter stance
regarding this: only accept CRLF and reject non compliant LF that might be a
parser differential and an attack in the waiting.
As such this ticket no longer is relevant. I would close it. Feel free to
reopen if I am wrong.
> SMTP server does not recognize LF only separator
> ------------------------------------------------
>
> Key: JAMES-3572
> URL: https://issues.apache.org/jira/browse/JAMES-3572
> Project: James Server
> Issue Type: Bug
> Components: SMTPServer
> Affects Versions: 3.6.0
> Environment: James: built from james-project-3.6.0 tag
> OS: Linux
> Reporter: Karsten Otto
> Priority: Major
> Fix For: 3.7.0, 3.6.1
>
>
> When I send a mail via SMTP and the blank line between headers and body
> consists only of an LF instead of CR LF, then James does not recognize it as
> the separator. Instead, it stores any subsequent body as part of the header
> blob, I assume as continuation of the last header line.
> I also observed this in DSN bounces, where the last part had the
> rfc822-headers type but included the mail body, when it was sent with an
> LF-only separator.
> I am not sure if this is indeed a bug or just a strict interpretation of the
> standard. If this is not a bug in your opinion, please feel free to close
> this ticket.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
