[4711] in RedHat Linux List
Re: URGENT: SENDMAIL security BUG
daemon@ATHENA.MIT.EDU (Cristian Gafton)
Sat Nov 16 16:44:53 1996
Date: Sat, 16 Nov 1996 23:40:02 +0200 (EET)
From: Cristian Gafton <gafton@sorosis.ro>
To: redhat-list@redhat.com
In-Reply-To: <Pine.LNX.3.94.961116152330.29937J-100000@mitchell.cap.af.mil>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Sat, 16 Nov 1996, Milam, Charles R. 1LT CAP wrote:
> > There is a bug in sendmail binary easily exploited with a program posted
> > few hours ago on a security list. All versions of redhat are vulnerable.
>
> Details, please?
The exploit was posted on best-of-security list and it works on all
redhat machines I have tested on. I refrain from posting the exploit to
the redhat-list for obviuos reasons.
It is a bug in sendmail which runs suid root, and the exploit is
amazingly simple. If anyone want to test it out, e-mail me privately (if
you can not get the original post).
In any condition, please try to install the fixed RPMs from my archive:
ftp://ftp.sorosis.ro/pub/linux/local/fixes
4ccb131e8ef9b1d1810c557c2e1217d8 sendmail-8.8.2-1.i386.rpm
d849e8bf2825f54463473c64ae72450c sendmail-8.8.2-1.src.rpm
15b2efef4e600eca5f66cc1fbfea3f0a sendmail-cf-8.8.2-1.i386.rpm
4073b4d84261ef3014601e2aa67d28f1 sendmail-doc-8.8.2-1.i386.rpm
Please note that vanilla 8.8.2 is also vulnerable.
Cristian Gafton
--
--------------------------------------------------------------------
Cristian Gafton gafton@sorosis.ro
Computers & Communications Center Network Administrator
35 Moara de Foc St., Iasi 6600, ROMANIA Tel: +40-32-252938
http://www.cccis.ro Fax: +40-32-252933
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
UNIX is user friendly. It's just selective about who its friends are.
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
