Bugtraq mailing list archives

Re: Remote exploit in sendmail 8.8.0


From: djb () koobera math uic edu (D. J. Bernstein)
Date: Fri, 18 Oct 1996 00:20:08 -0000


That, or get 8.8.1 which is out now. What service!

Is it just my imagination, or does sendmail.8.8.1.patch replace

   if (mime_fromqp((u_char *) buf, &obp, 0, MAXLINE) == 0)

with

   if (mime_fromqp((u_char *) buf, &obp, 0, &obp[MAXLINE] - obp) == 0)

This is not exactly what I'd call a fix.

---Dan



Current thread: