Re: An exploit for linux mh ver 6.8.4-5 ( update ) ...

[miquels () CISTRON NL (Miquel van Smoorenburg)]

In article <Pine.LNX.3.96.980321161207.2339A-100000 () mercury redhat com>,
Erik Troan <ewt () REDHAT COM> wrote:
> On Sat, 21 Mar 1998, Catalin Mitrofan wrote:
>
> > host (user):~>. .mh_profile
> > bash#
>
> Thanks for finding this -- I just put a fix on ftp.redhat.com.

I've tried this with the Debian mh_6.8.4-17 package, and nothing happens.
(It prints a lot of junk and then exits).  Also, mh_check is installed setgid
mail, not setuid root.

Mike.
--
 Miquel van Smoorenburg | Our vision is to speed up time,
    miquels () cistron nl  |   eventually eliminating it.