[4231] in bugtraq

home help back first fref pref prev next nref lref last post

Re: CERT Advisory CA-97.08 - Second vulnerability related to INN

daemon@ATHENA.MIT.EDU (Michal Jankowski)
Fri Apr 4 18:47:37 1997

Date: 	Sat, 5 Apr 1997 00:40:17 +0200
Reply-To: Michal Jankowski <michalj@FUW.EDU.PL>
From: Michal Jankowski <michalj@FUW.EDU.PL>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  Aleph One's message of Thu, 3 Apr 1997 16:09:33 -0600

Well, there are patches for INN, but the bug is actually in the
"mail" program and doesn't need INN to be exploited.

How about sending to somebody (to root, preferably) a mail with
"Reply-To: |some-interesting-command-here"
in hope he'll use ucb mail to reply to this letter?

   MJ

home help back first fref pref prev next nref lref last post