Bugtraq mailing list archives

Re: Sendmail 8.6.10: what's different?

From: iga () sovam com (Igor V. Semenyuk)
Date: Fri, 24 Feb 1995 02:59:02 +0300 (MMT)


I diffed 8.6.10 against what I was previously running (8.6.8).
Significant changes from bugtraq's point of view are mostly being more
paranoid about believing strings coming from possibly-untrustworthy
sources.  Here's the list:


Well, perhaps the list would have been more cleaner had you
diffed against 8.6.9 or get sendmail.8.6.10.patch
from ftp.cs.berkeley.edu - it's 25K size.

Does anyone know if IDA sendmail is vulnerable? CERT advisory
doesn't mention it - is it because IDA considered obsoleted or
because it is clean?

-- 
Igor V. Semenyuk                    Internet: iga () sovam com
SOVAM Teleport                      Phone:    +7 095 956 3008
Moscow, Russia

Current thread:

CERT Advisory CA-95:05.sendmail.vulnerabilities (fwd), (continued)
- - - CERT Advisory CA-95:05.sendmail.vulnerabilities (fwd) Paul 'Shag' Walmsley (Feb 22)
    - Re: CERT Advisory CA-95:05.sendmail.vulnerabilities (fwd) Dave Schweisguth (Feb 23)
    - Sendmail 8.6.9 security hole Igor V. Semenyuk (Feb 22)
    - Re: Sendmail 8.6.9 security hole Christopher Samuel (Feb 23)
    - Sun Security Bulletin #129 (sendmail) Mark Graff (Feb 22)
    - new sendmail bug? James W. Abendschan (Feb 22)
    - Re: new sendmail bug? joel (Feb 22)
    - Re: new sendmail bug? Dave Horsfall (Feb 22)
    - Sendmail 8.6.10: what's different? der Mouse (Feb 23)
    - X keyboard sniffing Paul Howell (Feb 23)
    - Re: Sendmail 8.6.10: what's different? Igor V. Semenyuk (Feb 23)
    - Re: Sendmail 8.6.10: what's different? Peter Wemm (Feb 24)
    - Re: Sendmail 8.6.10: what's different? Peter Wemm (Feb 23)
    - Re: Sendmail 8.6.10: what's different? Christian Wettergren (Feb 24)
    - Re: new sendmail bug? Michael Van Norman (Feb 23)
    - Re: snooper watchers Aleph One (Feb 22)
    - Re: HP-UX Problem... Pete Shipley (Feb 21)