Re: sendmail exploit script - resend

Jean Chouanard (Jean.Chouanard@xerox.fr)
Mon, 28 Mar 1994 12:45:22 --100

Messages sorted by: [ date ][ thread ][ subject ][ author ]
Next message: der Mouse: "shells refusing to run set[ug]id"
Previous message: Casper Dik: "Re: sendmail exploit script - resend"
Maybe in reply to: james abendchan: "sendmail exploit script - resend"
Next in thread: MICHAEL R. WIDNER: "Re: sendmail exploit script"

Hi folks.
I've spent some tine on my solaris 2.3 workstation trying this script.
It seems to me that you could change the default config file
using the output of calc BUT that the solaris sendmail will execute
the alias.sh script as users nobody in all the case.
Could someone confirm that?

Jean

Ps: Of course it does not mean that the solaris version is safe!

Ps2: my patch level for sendmail-solaris is : 101318-36

Next message: der Mouse: "shells refusing to run set[ug]id"
Previous message: Casper Dik: "Re: sendmail exploit script - resend"
Maybe in reply to: james abendchan: "sendmail exploit script - resend"
Next in thread: MICHAEL R. WIDNER: "Re: sendmail exploit script"