Re: usr/bin/newmail buffer overflow

["Larry W. Cashdollar" <lwc () VAPID DHS ORG>]

It isnt setuid on Mandrake 7.2.

On Sat, 10 Feb 2001, SosPiro wrote:

> I found a buffer overflow in /usr/bin/newmail (distributed with elm 2.5
> PL3) .
> "newmail is a program to allow monitoring of mailboxes in an intelligent
> fashion"
> I tested it on my Linux Box (RedHat 6.2)
> Look at this:
>
> #newmail -w AAAA....x 7561
> Segmentation Fault (core dumped)
>
> sospiro