Bugtraq mailing list archives
Re: SMAIL
From: unkadath!shamus () pine cse nau edu (James W. Abendschan)
Date: Fri, 7 Oct 1994 07:09:52 -0700 (MDT)
Hi, As far as I have seen the following is sufficient: -smpt_debug in config check_path in transports (after the 'file' sub) arg_debug_file should be added to the 'if then' resseting userid with certain arguments. This is in main.c and from memory.
there is another problem that was discovered recently which allows people to write to any non-existant file on the system and append to any file with semi user-controllable data. comp.mail.smail has a patch that will fix this -- i suggest you apply it if you run smail. -- James W. Abendschan "Hi Roy!" shamus () unkadath uucp, jwa () nau edu -- Pris