Re: Don't want to replace IDA sendmail

• Messages sorted by: [ date ][ thread ][ subject ][ author ]
• Next message: System Admin: "Re: Solaris 2.x utmp hole"
• Previous message: Dan Thorson : "Re: Solaris 2.x utmp hole - Notify CERT?"
• In reply to: Yossi Gottlieb: "Re: Don't want to replace IDA sendmail"

> > I believe this advisory refers to newlines in the From part of a message.
> > By specifying sendmail -F, a user can supply a string as the From name for
> > a message.

No, it doesn't.  That was covered in a previous advisory (CA-95:05) which 
is available from CERT.  This is something different.
 
> Can somebody shed some light on this problem?  

This problem is reported for version 5 of sendmail and doesn't (yet) 
*appear* to affect v8.  In fact, using Eric Allman's v8 is listed as a 
workaround.

If you don't want to replace IDA sendmail, then ring your local IDA rep 
and hassle them until they hand you a patch.  Then install it immediately.

Catherine.  I speak for myself only.

• Next message: System Admin: "Re: Solaris 2.x utmp hole"
• Previous message: Dan Thorson : "Re: Solaris 2.x utmp hole - Notify CERT?"
• In reply to: Yossi Gottlieb: "Re: Don't want to replace IDA sendmail"