[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

A flaw in binmail(1) reported to Sun by 8lgm some time ago, has not been fixed in the the latest patch. (The latest patch does fix the tmp file and mailbox creation problems successfully). Using the src for binmail(1) posted to bugtraq, and the diff for the latest patch provided to 8lgm by Sun to verify their fix, we have created a secure binmail(1) for SunOS.

However, as both the diff and source for binmail(1) are covered by copyright, we cannot post this fix.

We are therefore submitting our source to Sun, who we hope can then supply a secure binmail(1) in the near future.

• Contact your vendor for a patch.

• The current patch for binmail(1) is the most secure fix available from Sun, so is recommended for use. If your system is using a port of BSDs mail.local, we recommend continuing the use of this.