Re: [Corrected message] This OpenBSD local root hole may affect some FreeBSD systems

From: Borja Marcos (borjamar@sarenet.es)
Date: 04/12/02 

From: Borja Marcos <borjamar@sarenet.es>
To: security@freebsd.org
Date: Fri, 12 Apr 2002 21:23:50 +0200

On Friday 12 April 2002 21:20, you wrote:
> An a security problem with reverse fingers and TCP Wrapper (see Wietse
> Venema's "Murphy's Laws and Computer Security") exploited exactly the same.
> As far as I know, that behavior was removed from mail programs; they only
> accept escape sequences (at least the ~!) when running from a terminal.

        Sorry, I meant "was removed as a default behavior". I had not noticed the
"-I" option in FreeBSD's /usr/bin/Mail.

        Borja.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message