Bugtraq mailing list archives

Re: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2).

From: alan () manawatu gen nz (Alan Brown)
Date: Sun, 17 Nov 1996 23:54:47 +1300


On Sat, 16 Nov 1996, Leshka Zakharoff wrote:

#                This is exploit for sendmail smtpd bug


How many of these exploits are thwarted by setting sendmail.cf's
O RunAsUser=postmaster switch, making /var/spool/mail and var/spool/mqueue
664 postmaster.mail and giving postmaster a shell of /bin/false (C
version, compiled -Bstatic.)

AB

Current thread:

Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). Leshka Zakharoff (Nov 15)
- Re: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). Kari E. Hurtta (Nov 17)
- Re: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). Alan Brown (Nov 17)
  - Digital Unix v3.x (v4.x?) security vulnerability Eric Augustus (Nov 16)
    - Re: Digital Unix v3.x (v4.x?) security vulnerability hj () globecom net (Nov 17)
  - Re: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). Bryan Reece (Nov 17)
    - Re: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2). Simon Karpen (Nov 17)
    - Magic password of some linux-box(Hardware..) Seo Euiseong (Nov 17)
    - rplayd on HPUX 10.1 Henrik P Johnson (Nov 19)
    - Re: BoS: Magic password of some linux-box(Hardware..) Sergiu Popovici (Nov 19)
    - Re: BoS: Magic password of some linux-box(Hardware..) Sergei A. Golubchik (Nov 19)
    - Irix: root exploit for LicenseManager Yuri Volobuev (Nov 19)
    - Re: BoS: Magic password of some linux-box(Hardware..) moost () xs4all nl (Nov 20)

(Thread continues...)