Security Basics mailing list archives

Re: 8.12.6 sendmail version trojan


From: Wesley Shields <wxs () csh rit edu>
Date: Fri, 11 Oct 2002 13:52:51 -0400

On Wed, Oct 09, 2002 at 10:44:01AM +0800, rudy evan s. cobar wrote:

Hi!

Anybody encoutered the trojan under the 8.12.6 vresion of sendmail? How bout
the older version od this application (8.11.X). Is this also affected?



Sendmail itself was not affected.  The makefile used in building it was what was trojaned.  When building sendmail the 
makefile would bind a shell on a port.  If you rebooted after the build process you were fine, unless you build it 
again.

-- WXS


Current thread: