[4231] in bugtraq
Re: CERT Advisory CA-97.08 - Second vulnerability related to INN
daemon@ATHENA.MIT.EDU (Michal Jankowski)
Fri Apr 4 18:47:37 1997
Date: Sat, 5 Apr 1997 00:40:17 +0200
Reply-To: Michal Jankowski <michalj@FUW.EDU.PL>
From: Michal Jankowski <michalj@FUW.EDU.PL>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: Aleph One's message of Thu, 3 Apr 1997 16:09:33 -0600
Well, there are patches for INN, but the bug is actually in the
"mail" program and doesn't need INN to be exploited.
How about sending to somebody (to root, preferably) a mail with
"Reply-To: |some-interesting-command-here"
in hope he'll use ucb mail to reply to this letter?
MJ