smail 3.0 security hole?

Article View: comp.mail.misc

Article #1329

#1329

From: Randy Suess
Date: Fri, 08 Jun 1990 21:03

41 lines
1710 bytes

Not sure if this got out the first time.....


	I just had a root breaking here on chinet.  I am running
	ISC 2.0.2 with smail 3.0.  smail 3.0 is setuid root.
	I believe he broke in via smail.
	This is a piece of mail that got bounced to postmaster here.
	Any ideas?


From MAILER-DAEMON Fri Jun  8 13:32:55 1990
Return-Path: <MAILER-DAEMON>
Received: by chinet.chi.il.us (/\=-/\ Smail3.1.18.1 #18.65)
	id <m0hdo8c-00024vC@chinet.chi.il.us>; Fri, 8 Jun 90 13:32 CDT
Message-Id: <m0hdo8c-00024vC@chinet.chi.il.us>
Date: Fri, 8 Jun 90 13:32 CDT
From: <MAILER-DAEMON@chinet.chi.il.us>
To: Postmaster
Subject: mail failed, sending to address owner
Reference: <m0hdo8U-00021UC@chinet.chi.il.us>
Status: RO

|------------------------- Failed addresses follow: ---------------------|
 "|/tmp/x" ... failed: transport pipe: child returned status EX_1 (1)
|------------------------- Message text follows: ------------------------|
Received: by chinet.chi.il.us (/\=-/\ Smail3.1.18.1 #18.65)
	id <m0hdo8U-00021UC@chinet.chi.il.us>; Fri, 8 Jun 90 13:32 CDT
Message-Id: <m0hdo8U-00021UC@chinet.chi.il.us>
Date: Fri, 8 Jun 90 13:32 CDT
From: gandalf (alien life form)
To: root

hehe

	-randy

	randy@chinet.chi.il.us
-- 
Randy Suess
randy@chinet.chi.il.us

Technical Details

Message-ID: <1990Jun8.210309.13542@chinet.chi.il.us>

Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!mailrus!uwm.edu!ux1.cso.uiuc.edu!tank!gargoyle!chinet!randy

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!utzoo!utgpu!news-server.csri.toronto.edu!mailrus!uwm.edu!ux1.cso.uiuc.edu!tank!gargoyle!chinet!randy
From: randy@chinet.chi.il.us (Randy Suess)
Newsgroups: comp.mail.misc,comp.mail.uucp
Subject: smail 3.0 security hole?
Message-ID: <1990Jun8.210309.13542@chinet.chi.il.us>
Date: 8 Jun 90 21:03:09 GMT
Reply-To: randy@chinet.chi.il.us (Randy Suess)
Organization: Chinet - Chicago Public Access UNIX
Lines: 41