[ Search ] [ What's New? ] [ About ]
[ Bugs ] [ Misc ] [ Mailing Lists ] [ Newgroups ] [ NewsWire ] [ Papers ] [ People ]
[ Pictures ] [ Publications ] [ Responce Teams ] [ Tools ] [ Upcoming Events ] [ Web Sites ]

sendmail(8) (Version 5.*)
Systems Affected: SunOS 4.1.* up to and including patch 100377-19
Sendmail V5.*
IDA Sendmail V5.*
(Likely that any sendmail based on V5 is also vulnerable).
Problem: A flaw exists in versions of sendmail based on V5, which allows users to run programs and/or append to files remotely.

The user does not require an account on that system.

Solution:
  • Install V8 sendmail.

  • Obtain patch from vendor.

Aleph One / aleph1@underground.org
Copyright © 1996 Computer Underground Society. All rights reserved.