<div>
Again I still find it odd that &nbsp;such email addresses are possible<br />
320 character email addresses? unbelivable.
</div>


Again I still find it odd that  such email addresses are possible
320 character email addresses? unbelivable.

<div>
<div class="content wysiwyg-content">
I suspect that the RFC 2822 &nbsp;standards allow some shady email address sequences.<br />
Can anyone confirm this and suggest a remedy to the problem?<br />
<br />
I imagine I could validate and then do a check for any odd characters not typical<br />
Perhaps sequences like &nbsp;cmd\ blowupmymachine.exe@hurtme<wbr />.com &nbsp;may do something rather nasty.<br />
Perhaps someone has some ideas about this particularly which of the nasty punctuation characters <br />
make this possible
</div>
</div>


I suspect that the RFC 2822  standards allow some shady email address sequences.
Can anyone confirm this and suggest a remedy to the problem?

I imagine I could validate and then do a check for any odd characters not typical
Perhaps sequences like  cmd\ blowupmymachine.exe@hurtme.com  may do something rather nasty.
Perhaps someone has some ideas about this particularly which of the nasty punctuation characters 
make this possible

can valid email addresses contain hacker commands embedded especially for sendmail servers?

Within Internet message handling services (MHS), a message transfer agent or mail transfer agent (MTA) or mail relay is software that transfers electronic mail messages from one computer to another using a client–server application architecture. A MTA implements both the client (sending) and server (receiving) portions of the Simple Mail Transfer Protocol (SMTP). The terms mail server, mail exchanger, and MX host may also refer to a computer performing the MTA function. The Domain Name System (DNS) associates a mail server to a domain with mail exchanger (MX) resource records containing the domain name of a host providing MTA services.

Email Servers

Software is any set of instructions that directs a computer to perform specific tasks or operations. Computer software consists of programs, libraries and related non-executable data (such as documentation). Computer software is non-tangible, contrasted with computer hardware, which is the physical component of computers. Software written in a machine language is known as "machine code". However, in practice, software is usually written in high-level programming languages than machine language. High-level languages are translated into machine language using a compiler or interpreter or a combination of the two.

Software

A vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw. To exploit a vulnerability, an attacker must have at least one applicable tool or technique that can connect to a system weakness, known as the attack surface. Vulnerability management is the cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities. Other vulnerabilities include security risks, security defects and constructs in programming languages that are difficult to use properly.