Vulnerability Development: Re: books or material on mail protocols

[exon <exon () home se>]

Mads Rasmussen wrote:
> I searched amazon for books on mail protocols such as pop2/3, imap3/4 
> and smtp but wasn't able to find anything interesting, like code examples.
> What puzzles me are the mime encodings and if it's possible to write 
> back to an imap server, you read the message, modify the body and write 
> the changed message back to the imap server.
> I know the source are the RFCs on each protocol, that's fine to 
> understand the protocol, but how do you implement it in win2k, 2k3, unix??
> Could anyone help out?
Download an opensource IMAP server and start reading. There are legio 
around, so you shouldn't have any trouble.
For pop3 I prefer popa3d as distributed by the Openwall project, 
www.openwall.com. For imap, I would suggest Courier. The SMTP server of 
choice would be postfix.
All of them are very securityminded, so you'll most likely read yourself 
into the proper state of mind for writing code yourself.
> Thanks for the info on sql injection!!
>
> Mads