Re: procmail heap overflow

[Skot <skot () canada com>]

In-Reply-To: <m3ptynsn51.fsf () clitoris czuby net>


> flatline <flatline () blackhat nl> napisa³(a):
>
> > i found a heap overflow in procmail (up until latest) some time ago.
>
> Actually, the latest version of procmail is 3.22 (2001/09/10), which
> is not vulnerable:

That seems to differ between BSD and Linux distros too.  My Mandrake 7.2 running Procmail v3.14 
1999/11/22, doesn't segfault, yet the newer MDK8.2 running procmail v3.22 2001/09/10, does.

Go figure.

Skot.