Bugtraq mailing list archives

Re: Sendmail 6.x+ holes?

From: Kari.Hurtta () dionysos fmi fi (Kari E. Hurtta)
Date: Thu, 20 Jun 1996 19:48:15 +0300


Alan Brown kirjoittaa:

On Wed, 19 Jun 1996, Robert A. Boyd wrote:

Does anyone know of any recent exploits fro sendmail 6.x and up? I
suspect my machine might be vulnerable and am just curious as to any new
discoveries.


6.x doesn't exist afaik. :)


It IS listed in sendmail's RELEASE_NOTES.
Sendmail 8.7.5's RELEASE_NOTES file start with sendmail version 6.2 and
sendmail.cf version 6.1. Date string is: 92/12/30

There are various well known exploits right up to 8.7.4? (5)?
Most are listed on web pages if you do a quick search out of www.lycos.com


There is quite may SECURITY entries in RELEASE_NOTES.

Current thread:

Sendmail 6.x+ holes? Robert A. Boyd (Jun 19)
- Re: Sendmail 6.x+ holes? Alan Brown (Jun 19)
  - Re: Sendmail 6.x+ holes? Kari E. Hurtta (Jun 20)
    - Re: Sendmail 6.x+ holes? Roland Dobbins (Jun 20)
  - Re: Sendmail 6.x+ holes? martinh () mailhost emap co uk (Jun 24)
    - Re: Sendmail 6.x+ holes? Henry W. Farkas (Jun 24)
- Router programming,source routes and spoofed ICMP attacks. Alan Brown (Jun 19)
  - Re: Router programming,source routes and spoofed ICMP attacks. Brian Mitchell (Jun 20)
    - Re: Router programming,source routes and spoofed ICMP attacks. Alan Brown (Jun 22)
    - Re: Router programming,source routes and spoofed ICMP attacks. Brian Mitchell (Jun 24)
  - Re: Router programming,source routes and spoofed ICMP attacks. Cyrus Durgin (Jun 20)
    - Re: Router programming,source routes and spoofed ICMP attacks. Yiorgos Adamopoulos (Jun 21)
    - Administratrivia Aleph One (Jun 21)

(Thread continues...)