[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

majordomo(8)
Systems Affected: Any systems using the majordomo mailing list software version up to 1.90.
Problem: Basicly, through clever hackery of "From:" lines on incoming messages, someone could convince 'majordomo' or 'request-answer' to run a commnad for them as user Majordomo is running as (whatever the "wrapper" program is setuid to if your bsd, or the user compiled into the wrapper if your posix box). This command, for instance, send them you passwd file, or even compile and run a supplied program to start a shell for them on a specified port, so all they'd have to do is telnet to that port from the outside
Solution: Upgrade to the latest release of Majordomo.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.