Skip to Content.
Sympa Menu

sm-grimoire - Re: [SM-Grimoire] Another sendmail hole

sm-grimoire AT lists.ibiblio.org

Subject: Discussion of Spells and Grimoire items

List archive

Chronological Thread  
  • From: Spencer Ogden <spencero AT mail.utexas.edu>
  • To: sm-grimoire AT lists.ibiblio.org
  • Subject: Re: [SM-Grimoire] Another sendmail hole
  • Date: Sat, 29 Mar 2003 23:02:48 -0600

If I recall this guy has found a few previous holes in Sendmail, so it
looks like he is doing a pretty serious study of the code base.

Spencer

On Saturday 29 March 2003 10:40 pm, Jason Flatt wrote:
> On Saturday 29 March 2003 03:23 pm, Pierre Abbat wrote:
> > I just looked at Bugtraq and there's a new sendmail out. Michal
> > Zalewski found a hole in sendmail in which a character 0xff in the
> > right place, sent to a sendmail compiled with signed characters, can
> > be misinterpreted as a flag that indicates no character. The new
> > version is 8.12.9.
> >
> > phma
>
> How do people find these things? Was Michal that bored that he felt
> like sending a sendmail server stray characters to see what happens?




Archive powered by MHonArc 2.6.24.

Top of Page