[4695] in RedHat Linux List

home help back first fref pref prev next nref lref last post

URGENT: SENDMAIL security BUG

daemon@ATHENA.MIT.EDU (Cristian Gafton)
Sat Nov 16 13:55:06 1996

Date: Sat, 16 Nov 1996 20:52:12 +0200 (EET)
From: Cristian Gafton <gafton@sorosis.ro>
To: RedHat List <redhat-list@redhat.com>
cc: redhat-announce-list@redhat.com
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com


There is a bug in sendmail binary easily exploited with a program posted 
few hours ago on a security list. All versions of redhat are vulnerable.

This is not an official fix, nor do I take any responsability for it, but 
for x86 platfroms only there are fixed RPMs at the folowing URL:

ftp://ftp.sorosis.ro/pub/linux/local/fixes

MD5 sums of the packages:
4ccb131e8ef9b1d1810c557c2e1217d8  sendmail-8.8.2-1.i386.rpm
d849e8bf2825f54463473c64ae72450c  sendmail-8.8.2-1.src.rpm
15b2efef4e600eca5f66cc1fbfea3f0a  sendmail-cf-8.8.2-1.i386.rpm
4073b4d84261ef3014601e2aa67d28f1  sendmail-doc-8.8.2-1.i386.rpm

All admins of the redhat x86 boxes, please consider upgrading, until 
RedHat release an official fix. Also, I beg Alpha and Sparc linux owners 
to try to download the src RPM and release binary RPMs for other 
platforms.

Best regards and take care,

		Cristian Gafton
--
--------------------------------------------------------------------
Cristian Gafton                                    gafton@sorosis.ro
Computers & Communications Center              Network Administrator
35 Moara de Foc St., Iasi 6600, ROMANIA           Tel: +40-32-252938
http://www.cccis.ro                               Fax: +40-32-252933
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
UNIX is user friendly. It's just selective about who its friends are.


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post