[1836] in bugtraq
Re: Don't want to replace IDA sendmail
daemon@ATHENA.MIT.EDU (Catherine Allen)
Fri May 19 00:41:56 1995
Date: Fri, 19 May 1995 11:54:41 +1000 (GMT+1000)
From: Catherine Allen <Catherine.Allen@mailbox.uq.oz.au>
To: bugtraq@fc.net
In-Reply-To: <199505181058.NAA07467@lune.math.tau.ac.il>
> > I believe this advisory refers to newlines in the From part of a message.
> > By specifying sendmail -F, a user can supply a string as the From name for
> > a message.
No, it doesn't. That was covered in a previous advisory (CA-95:05) which
is available from CERT. This is something different.
> Can somebody shed some light on this problem?
This problem is reported for version 5 of sendmail and doesn't (yet)
*appear* to affect v8. In fact, using Eric Allman's v8 is listed as a
workaround.
If you don't want to replace IDA sendmail, then ring your local IDA rep
and hassle them until they hand you a patch. Then install it immediately.
Catherine. I speak for myself only.
