Subject: reading some signed messages in PINE crashes MS Exchange 5.5 server

From: Jay Libove <[email-masked]>
Date: Sat, 11 Oct 2003 22:03:35 -0400 (EDT)

Recently, my Exchange 5.5 server (SP4, on Windows Advanced Server 2000)
began crashing in store.exe, every time I attempted to read certain signed
messages with PINE (4.58 on Linux).

Note that reading those same messages with Outlook 2002 does not crash the
Exchange server.

The particular messages where this happens are on certain mailing lists,
including Full Disclosure ([email-masked]) and
OpenSSH UNIX Development ([email-masked]).

Here are the full headers from one such message:

To: Richard Spiers <[email-masked]>
Cc: [email-masked]
Subject: Re: [Full-Disclosure] Local DoS in windows.
From: [email-masked]
Sender: [email-masked]
Date: Sat, 11 Oct 2003 21:05:29 -0400

The message has a single small attachment (ATT00004.dat) which is a GPG
signature:

Has anyone else seen this? Is there a patch or workaround to prevent PINE
from doing whatever it is doing with this which is causing Exchange 5.5's
store.exe process to crash?

Thanks
-Jay