sendmail worm fix (2)

Thread View: comp.mail.sendmail

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Jim Crammond Mon, 07 Nov 1988 17:26

#2950

Author: Jim Crammond
Date: Mon, 07 Nov 1988 17:26

24 lines
1372 bytes

The previous fix prevents remote users mailing getting a local shell,
however it is still possible for a local user to run sendmail by hand
and exploit the hole (and get a non-root shell).
Those who are worried by this may wish to take advantage of the following:

   From: Andrew Findlay <Andrew.Findlay@brunel.ac.uk>
   Date: Mon, 7 Nov 88 16:57:35 BST

   It may be worth making a safe Sun binary available by anon Blue-Book
   FTP and putting a uuencoded version in an info-server too.

   I have put two binaries in the 'guest' file area on uk.ac.brunel.me:
   (Username guest, any passwd)

   <FTP>sun-sendmail-IDA
   <FTP>pyr-sendmail-IDA

   Both are IDA-sendmail, compiled without DEBUG or WIZ. The Sun version
   was compiled under SunOs 3.3 and also runs under 4.0. Vanilla versions
   would be more useful to most people though.

   Andrew

-Jim.

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads