Re: Sendmail
From: Chris Faulhaber (jedgar@fxp.org)
Date: 08/30/01
- Next message: Alfred Perlstein: "Re: Jail question"
- Previous message: Ronan Lucio: "Jail question"
- In reply to: Ronan Lucio: "Re: Sendmail"
- Next in thread: Chris Johnson: "Re: Sendmail"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 30 Aug 2001 16:26:35 -0400 From: Chris Faulhaber <jedgar@fxp.org> To: Ronan Lucio <ronan@melim.com.br>
On Thu, Aug 30, 2001 at 05:25:18PM -0300, Ronan Lucio wrote:
> Hi Hajimu,
>
> > mike> Probably not.. But, you never know. Someone could devise some clever
> way
> > mike> for some other process to exploit the bug.
> >
> > sendmail 8.11.15 had local-exploit. If you use old version of
> > sendmail, you must upgrade to 8.11.16. Don't forget to drop setuid
> > bit of old sendmail binary or remove it.
>
> How can I do it?
>
> I typed ls -l /usr/sbin, it shows me:
>
> lrwxrwxrwx 1 root wheel 21 Aug 28 06:33 sendmail -> /usr/sbin/mailwrapper
> -r-xr-xr-x 1 root wheel 4928 Apr 21 06:10 mailwrapper
>
> Is it right?
>
> Thank you very much,
>
Perhaps you should review the advisory which explains the corrective
measures in detail.
http://docs.freebsd.org/mail/current/freebsd-security-notifications.html
-- Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
- application/pgp-signature attachment: stored
- Next message: Alfred Perlstein: "Re: Jail question"
- Previous message: Ronan Lucio: "Jail question"
- In reply to: Ronan Lucio: "Re: Sendmail"
- Next in thread: Chris Johnson: "Re: Sendmail"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
