Re: Security problem in C news and INN

[shipley () merde dis org (Evil Pete)]

> Evil Pete says:
> > > so, give details.
> > >
> > > Scott
> >
> >
> > there are shell scripts in Cnews and INN that pass the message to
> > ucbMail, where one can do ~ escapes.
>
> Would simply replacing with /bin/mail fix this?


I am not sure, (since I no longer runa news site), but if you can the
full patch set it will be fixed.