[2531] in bugtraq
Re: need more for sendmail VRFY and EXPN bug
daemon@ATHENA.MIT.EDU (Casper Dik)
Wed May 15 14:23:11 1996
Date: Wed, 15 May 1996 12:00:37 +0200
Reply-To: Bugtraq List <BUGTRAQ@netspace.org>
From: Casper Dik <casper@holland.Sun.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@netspace.org>
In-Reply-To: Your message of "Tue, 14 May 1996 23:16:50 PDT."
<199605150616.XAA14095@ecosys.nbs.nau.edu>
>Wasn't this the bug that 8LGM spoke about a long time ago?
>I too would like additional information; I haven't seen an
>exploit for this anywhere.
It was similar, as it also involved syslog().
The 8lgm advisory probably referred to other syslog() messages
(using fields from the message headers)
Casper