Bugtraq mailing list archives

Re: CERT Advisory CA-97.08 - Second vulnerability related to INN

From: michalj () FUW EDU PL (Michal Jankowski)
Date: Sat, 5 Apr 1997 00:40:17 +0200


Well, there are patches for INN, but the bug is actually in the
"mail" program and doesn't need INN to be exploited.

How about sending to somebody (to root, preferably) a mail with
"Reply-To: |some-interesting-command-here"
in hope he'll use ucb mail to reply to this letter?

   MJ

Current thread:

Re: CERT Advisory CA-97.08 - Second vulnerability related to INN Michal Jankowski (Apr 04)