Re: Local root vulnerability found in exim 4.x (and 3.x)

["Tabor J. Wells" <twells () fsckit net>]

[Bugtraq moderator: Please approve this post rather than my previous one.
The archive link in that post munges the patches. Thanks]

On Wed, Dec 04, 2002 at 04:40:29PM +0100,
Wana Thomas <01psi194 () fhwn ac at> is thought to have said:

> Solution
> --------
>
> Exim developers have been informed and a patch will be
> ready shortly.

Philip Hazel, the author of Exim, released patches for 4.10 and 3.36 on the
exim-users list earlier today. Further details on the vulnerability and 
the patches for both versions can be found in the list archives below:

http://www.exim.org/pipermail/exim-users/Week-of-Mon-20021202/046978.html

-- 
--------------------------------------------------------------------
Tabor J. Wells                                     twells () fsckit net
Fsck It!                 Just another victim of the ambient morality