[2189] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Patch for 8lgm syslog/sendmail vulnerability, 4.4lite machines

daemon@ATHENA.MIT.EDU (Mark Graff)
Fri Sep 1 02:26:55 1995

Date:         Wed, 30 Aug 1995 11:35:16 -0700
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Mark Graff <Mark.Graff@Eng.Sun.COM>
X-To:         BUGTRAQ@CRIMELAB.COM
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>

Folks,

Charles Hannum wrote,

 > [Sigh.  I don't really have time to deal with this right now, but I
 > suppose it can't really wait.]

...and I find myself in agreement.

Just FYI, we're working on a fix too. I don't have an estimate yet but
I do plan to issue an advisory late today outlining what we know at this
time. (Nothing I say then will be much a news flash to readers of this
group.)

I'll send it out to the Customer Warning System (subscribe via mail to
"security-alert@sun.com" with the subject ("subscribe CWS <your-addr>").
I'll also post it here and on comp.security.unix.

-mg-

p.s. Thanks to all who have proferred suggestions.

      /\
     \\ \        Mark G. Graff
    \ \\ /       Sun Security Coordinator
   / \/ / /      MS MPK3
  / /   \//\     2550 Garcia Avenue
  \//\   / /     Mountain View, CA 94043-1100
   / / /\ /      Phone: 415-688-9151
    / \\ \       Email: mark.graff@Sun.COM
     \ \\               security-alert@sun.com
      \/

home help back first fref pref prev next nref lref last post