Re: Email from PL/SQL

Naba,

Not a fault with PL/SQL. You may easily impersonate other folks quite readily via SMTP.

Login to a mail server on port 25 sometime, you can send mail directly from there and use any old address you want.

If the recipient digs into the header, it will be noticed that the mail is forged.

Jared

On Tuesday 12 June 2001 20:15, N J Neog wrote:
> RE: Changing Java pool size to 0Hi all,
>
> Using UTL_TCP (and thru other package like utl_smtp) I can send
> Email.
>
> But the problem I find is - I can send mail in the name of someone else
> mail ID.
>
> I would like to know from you - Why PL/SQL allow me to send mail
> impersonating someone else Email ID.
>
> Where is the pitfall ? In PL/SQL or In Mail Server ?
>
> TIA
>
> Naba

Content-Type: text/html; charset="iso-8859-1"; name="Attachment: 1"
Content-Transfer-Encoding: quoted-printable
Content-Description: 
----------------------------------------

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Jared Still
  INET: jkstill_at_cybcon.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).