Re: CERT Alert on new sendmail bug - any info?

Ben Golding (bgg@connect.com.au)
Mon, 21 Aug 1995 11:10:16 +1000

> It's a shame to have to give up IDA....  V8 doesn't do username-hiding
> nearly as well.

I have ported the IDA kit to sendmail 8.6.12, although it does require
a small patch to the source.  You can pick up the IDA extensions from
ftp.connect.com.au:pub/mail/sendmail.8.6.12.ida.tar.Z.

The patch changes some of sendmail-8's ruleset handling and I don't
believe it affects the underlying security of the program.

Username hiding works fine in this version.

        Ben.