Re: Sikkerhedshul i sendmail

From: Poul-Henning Kamp (none@phk--phk.freebsd.dk.lh.bsd-dk.dk)
Date: Thu 23 Mar 2006 - 08:02:33 CET

Next message: Simon L. Nielsen: "Re: Sikkerhedshul i sendmail"
Previous message: Flemming Jacobsen: "Sikkerhedshul i sendmail"
In reply to: Flemming Jacobsen: "Sikkerhedshul i sendmail"
Next in thread: Simon L. Nielsen: "Re: Sikkerhedshul i sendmail"
Reply: Simon L. Nielsen: "Re: Sikkerhedshul i sendmail"
Reply: Henrik Kramshoej: "Re: Sikkerhedshul i sendmail"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

To: bsd-dk@bsd-dk.dk
Subject: Re: Sikkerhedshul i sendmail 
From: "Poul-Henning Kamp" <none@phk--phk.freebsd.dk.lh.bsd-dk.dk>
Date: Thu, 23 Mar 2006 08:02:33 +0100

In message <none@20060323065315.GA94130--fj.batmule.dk.lh.bsd-dk.dk>, Flemming Jacobsen writes:

>Bemærk at der er et hul i sendmail der kan tillade en angriber
>fra nettet at eksekvere vilkårlig kode.

... men der er ingen der har "the full monty" på sagen, så det vides
ikke helt hvad det er der foregår.

Tilsyneladende noget med signaler og sendmail brugte signaler til
at lave timeouts mv, så nu har de omskrevet hele den del med et
mega-patch på 3000 linier.

Postfix kan varmt anbefales.

Life is too short for sendmail.cf

Poul-Henning

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

Next message: Simon L. Nielsen: "Re: Sikkerhedshul i sendmail"
Previous message: Flemming Jacobsen: "Sikkerhedshul i sendmail"
In reply to: Flemming Jacobsen: "Sikkerhedshul i sendmail"
Next in thread: Simon L. Nielsen: "Re: Sikkerhedshul i sendmail"
Reply: Simon L. Nielsen: "Re: Sikkerhedshul i sendmail"
Reply: Henrik Kramshoej: "Re: Sikkerhedshul i sendmail"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b30 : Wed 15 Nov 2006 - 18:24:58 CET