Bugtraq mailing list archives

Re: Security problem in C news and INN

From: pmetzger () lehman com (Perry E. Metzger)
Date: Thu, 24 Feb 1994 14:20:55 -0500


Evil Pete says:

so, give details.

Scott



there are shell scripts in Cnews and INN that pass the message to
ucbMail, where one can do ~ escapes.


Would simply replacing with /bin/mail fix this?

.pm

Current thread:

Re: Security problem in C news and INN Scott D. Yelich (Feb 23)
- Re: Security problem in C news and INN Evil Pete (Feb 24)
  - Re: Security problem in C news and INN Perry E. Metzger (Feb 24)
    - Re: Security problem in C news and INN Evil Pete (Feb 24)
    - syslog security problems Mike Evans (Feb 24)
    - Re: Security problem in C news and INN Jeroen Scheerder (Feb 24)
    - Re: Security problem in C news and INN Rafi Sadowsky (Feb 26)
    - Re: Security problem in C news and INN Robert Crowe (Feb 26)
    - Re: Security problem in C news and INN Rafi Sadowsky (Feb 26)
    - Re: Security problem in C news and INN hoodr () hoodr slip netcom com (Feb 27)
  - Re: Security problem in C news and INN Rafi Sadowsky (Feb 25)
    - Re: Security problem in C news and INN Henry Spencer (Feb 25)
    - Re: Security problem in C news and INN Casper Dik (Feb 26)