Re: CERT Alert on new sendmail bug - any info?

[bgg () connect com au (Ben Golding)]

> It's a shame to have to give up IDA....  V8 doesn't do username-hiding
> nearly as well.

I have ported the IDA kit to sendmail 8.6.12, although it does require
a small patch to the source.  You can pick up the IDA extensions from
ftp.connect.com.au:pub/mail/sendmail.8.6.12.ida.tar.Z.

The patch changes some of sendmail-8's ruleset handling and I don't
believe it affects the underlying security of the program.

Username hiding works fine in this version.

        Ben.