Bugtraq mailing list archives

Re: Sendmail 8.8.x/8.9.x bugware

From: alan () MANAWATU GEN NZ (Alan Brown)
Date: Mon, 18 Jan 1999 18:20:38 +1300


On Sat, 16 Jan 1999, Jens Hoffmann wrote:

Due to defined behaviour. Ever heard of UUCP and Bangpaths?


Bangpathing is evil juju from the dark ages which should be wiped out -
or at least moved out of the downtown area.

I got him to try relay testing via my sendmail 8.9.2 boxes. No relay occured.

Yes, I run uucp and various other forwarding schemes. There are a number
of sendmail.cf fixes mentioned in the Changelog which combat 8.9.1
relaying under specific circumstances.

AB

Current thread:

Sendmail 8.8.x/8.9.x bugware Michal Zalewski (Dec 11)
- Re: Sendmail 8.8.x/8.9.x bugware Alan Brown (Jan 16)
  - Re: Sendmail 8.8.x/8.9.x bugware Michal Zalewski (Dec 12)
    - Re: Sendmail 8.8.x/8.9.x bugware Frank Louwers (Jan 18)
    - Win95/98 SMB Authentication Vulnerability (fwd) tschweik () FIDUCIA DE (Jan 18)
  - [SECURITY] ftpwatch package has major security problems Jamie Fifield (Jan 17)
  - Michal's report and sendmail-8.9.2 GvS (Jan 18)
- Re: Sendmail 8.8.x/8.9.x bugware Jens Hoffmann (Jan 16)
  - Re: Sendmail 8.8.x/8.9.x bugware Alan Brown (Jan 17)
- Re: Sendmail 8.8.x/8.9.x bugware John Mizzi (Jan 17)
  - Personal web server kiborg (Jan 17)
    - Re: Personal web server Dave Pifke (Jan 18)
    - Another web-based mail reader hole Dave Pifke (Jan 18)
    - Re: Another web-based mail reader hole Peter van Dijk (Jan 19)
  - Re: Sendmail 8.8.x/8.9.x bugware Michal Zalewski (Jan 18)
- Re: Sendmail 8.8.x/8.9.x bugware Nic Bellamy (Jan 19)
- NetBSD Security Advisory 1999-001: select(2)/accept(2) race Luke Mewburn (Jan 20)
  - Re: NetBSD Security Advisory 1999-001: select(2)/accept(2) race Alan Cox (Jan 23)
    - Mirc 5.5 'DCC Server' hole Spikeman (Jan 24)

(Thread continues...)