Bugtraq mailing list archives

Re: Don't want to replace IDA sendmail


From: Catherine.Allen () mailbox uq oz au (Catherine Allen)
Date: Fri, 19 May 1995 11:54:41 +1000 (GMT+1000)


I believe this advisory refers to newlines in the From part of a message.
By specifying sendmail -F, a user can supply a string as the From name for
a message.

No, it doesn't.  That was covered in a previous advisory (CA-95:05) which 
is available from CERT.  This is something different.
 
Can somebody shed some light on this problem?  

This problem is reported for version 5 of sendmail and doesn't (yet) 
*appear* to affect v8.  In fact, using Eric Allman's v8 is listed as a 
workaround.

If you don't want to replace IDA sendmail, then ring your local IDA rep 
and hassle them until they hand you a patch.  Then install it immediately.

Catherine.  I speak for myself only.



Current thread: