Possible Attack?

[Paul Howarth]

On Wed, 2005-09-14 at 23:07 -0600, chris wrote:
> I'm trying to figure out what this means...  It came through my logwatch 
> a couple of weeks ago
> "WARNING!!!! Possible Attack:
> 
>     Attempt from UNKNOWN with:
>        Fixed MIME Content-Type header field: 1 Time(s)
>  	Total:  1 Time(s)"
> 
> It only showed up once.
> 
> any help would be appreciated.

It means that your mail server detected a malformed MIME Content-Type
header field in a mail that it processed (probably incoming). It's
possible that some mail program had a buffer overflow or other
vulnerability that could be exploited by sending a carefully-crafted
malfored MIME Content-Type header in an email. The mail server's action
of fixing the header averted this. Logwatch reported the log entry as
something you might be interested in. I wouldn't worry about it.

Paul.
-- 
Paul Howarth <paul at city-fan.org>