[5946] in bugtraq
[SIGNED] Buffer overflows in Deliver: get 2.1.13
daemon@ATHENA.MIT.EDU (Chip Salzenberg)
Tue Jan 13 00:24:39 1998
Date: Mon, 12 Jan 1998 14:26:28 -0500
Reply-To: chip@pobox.com
From: Chip Salzenberg <chip@ATLANTIC.NET>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199801121636.LAA22431@cyprus.atlantic.net> from Chip Salzenberg
at "Jan 12, 98 11:36:14 am"
According to Chip Salzenberg:
> PS: I'll be happy to send a PGP-signed copy of this message once I
> manage to get my PGP to produce a human-readable signed message.
> (For some reason it always generates opaque output for me...)
Got it:
-----BEGIN PGP SIGNED MESSAGE-----
I'm the author of Deliver, a program for local delivery of mail.
Normally, Deliver is installed suid root. There's are two buffer
overflow bugs in versions of Deliver currently in use. If you
use Deliver or know someone who does, I strongly suggest upgrading
to Deliver 2.1.13. Here's one place to get it:
http://www.pobox.com/~chip/deliver-2.1.13.tar.gz
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3
Charset: noconv
iQCVAwUBNLptSJnMgk32gQ1ZAQFrhgP/dKHK0bXSITi0rY8mwF0709VeIBa33PBf
L5iLo693prKQZqB/eOxFqN4t4gIJ14LCETzVcpKJRNFsf/4eVRmAZjJkI6Ur3PN0
L/06kVbV/Gk8jC7hPU8NgI5JSKrr+aZy4QQFiEwA7EepkWHG4OfE6brG+Rg6YfFB
6TIr8KnCyYo=
=K++z
-----END PGP SIGNATURE-----
--
Chip Salzenberg - a.k.a. - <chip@pobox.com>
"I stopped that bus and I saved them kids!" "All except one -- the one
you let drive!" "He showed me his license..." "He was seven!!!" // MST3K
