Bugtraq mailing list archives

Re: sendmail -C: Known? Patches? (AIX 4.1.5)

From: eric () SENDMAIL ORG (Eric Allman)
Date: Thu, 7 Aug 1997 07:18:09 -0700


I had mail from Matt Bishop saying that he documented this problem
in a RIACS memo in approximately 1984.  I did some more digging and
found that this was indeed a problem in sendmail, fixed in version
4.31 on August 5, 1984.  Pretty shocking if anyone is still running
a version that old.

eric

Current thread:

SSH LocalForward, (continued)
- - - SSH LocalForward Nicolas Dubee (Aug 02)
    - Re: your mail Erik Troan (Aug 10)
    - Sun Security Bulletin #00149 Aleph One (Aug 13)
    - Sun Security Bulletin #00150 Aleph One (Aug 13)
    - Possible fixed identd Phillip R. Jaenke (Aug 13)
    - CERT Advisory CA-97.22 - BIND - the Berkeley Internet Name Daemon Aleph One (Aug 14)
    - Vulnerability in 4.4BSD rfork() implementation Thomas H. Ptacek (Aug 02)
    - Linux clone() looks safe (Re: Vulnerability in 4.4BSD rfork() Jeff Epler (Aug 02)
    - Re: Linux clone() looks safe (Re: Vulnerability in 4.4BSD rfork() Marc Slemko (Aug 03)
  - Re: sendmail -C: Known? Patches? (AIX 4.1.5) Eric Allman (Aug 06)
  - Re: sendmail -C: Known? Patches? (AIX 4.1.5) Eric Allman (Aug 07)
    - Re: sendmail -C: Known? Patches? (AIX 4.1.5) Gene Spafford (Aug 09)
    - Re: sendmail -C: Known? Patches? (AIX 4.1.5) Troy Bollinger (Aug 10)
    - procfs hole Brian Mitchell (Aug 10)
    - Re: procfs hole Jonathan A. Zdziarski (Aug 10)
    - Re: procfs hole Brian Mitchell (Aug 10)
  - NT DNS Implicit Search Order Hole Aleph One (Aug 09)
    - Program To decrypt password in ws_ftp.ini JeBe (Aug 10)