Bugtraq mailing list archives

Sun Internet Mail Server

From: mike () ISP FORMUS PL (Michal Krzysztofowicz)
Date: Sun, 20 Feb 2000 00:36:57 +0100


Hello,

Sorry if this subject was discussed before..

I have just discovered, that during the install process, SIMS creates a
world-readable /tmp/sims_setup.dat file, which, among the others, contains
all the passwords in clear text.

Here's the example:

administrator-name=Directory Manager
administrator-passwd=dupa.8
administrator-passwd2=dupa.8
siteadmin-name=siteadmin
siteadmin-passwd=dupa.8
siteadmin-passwd2=dupa.8

No comments...

Best Regards,

Michal Krzysztofowicz
UNIX Systems Administrator
Formus Polska Sp. z o.o.

Current thread:

snmp problems still alive... Michal Zalewski (Feb 14)
- NetBSD Security Advisory 2000-001 Daniel Carosone (Feb 15)
- Re: snmp problems still alive... Gus Huber (Feb 15)
  - cisco/ascend snmp config tool or exploit? -- Re: snmp problems still alive monti (Feb 17)
    - Sun Internet Mail Server Michal Krzysztofowicz (Feb 19)
    - flex license manager tempfile predictable name... sp00n (Feb 21)
    - Re: flex license manager tempfile predictable name... Roelof JT Jonkman (Feb 22)
    - Re: flex license manager tempfile predictable name... David Evans (Feb 23)
    - FreeBSD Security Advisory: FreeBSD-SA-00:03.asmon Kris Kennaway (Feb 19)
    - Re: cisco/ascend snmp config tool or exploit? -- Re: snmp problems still alive Michal Zalewski (Feb 20)
    - Patch Available for "VM File Reading" Vulnerability Microsoft Product Security (Feb 19)
    - Re: cisco/ascend snmp config tool or exploit? -- Re: snmp problems still alive Michal Zalewski (Feb 20)
    - unused bit attack alert LigerTeam (Feb 21)
    - A.L.E.R.T.: BigMailBox.com href tokens leave mailboxes open to control by a malicious site. Cancer Omega (Feb 21)
    - Re: unused bit attack alert Jochen Bauer (Feb 22)

(Thread continues...)