The ending sequence parsing code in NNTP is confused if the following
occurs:
� | A post (or Ihave newsfeed) comes into a newsgroup that the poster does
not have access to. |
� | The post is greater than 1K in size. |
� | The character at offset 1k in the posted article is 0xA. |
� | The last 3 characters (before the real ending sequence) of the article
are ". 0xD 0xA" ("." 0x0d 0x0a). |
� | The article is rejected.
|
Exchange Server prematurely terminates the post and
therefore corrupts the data stream between the client and server. This can
also happen with messages larger than the maximum message size. NNTP is
treating the last 5 bytes of an article as commands, and as a result sends the following error message to the client:
500 command not recognized