Re: OpenServer 5.0.6 OpenServer 5.0.7 : Multiple Vulnerabilities in Sendmail
On Wednesday 28 July 2004 16:10, please_reply_to_security@xxxxxxx
allegedly wrote:
> _____________________________________________________________________
>_________
>
> SCO Security Advisory
>
> Subject: OpenServer 5.0.6 OpenServer 5.0.7 : Multiple
> Vulnerabilities in Sendmail Advisory number: SCOSA-2004.11
> Issue date: 2004 July 28
> Cross reference: sr876461 fz527630 erg712277 CAN-2003-0161 CA-2003-12
> sr884730 fz528323 erg712435 CAN-2003-0694 CA-2003-25
> _____________________________________________________________________
>_________
>
>
> 1. Problem Description
>
> CERT Advisory CA-2003-12
>
> There is a vulnerability in sendmail that can be exploited
> to cause a denial-of-service condition and could allow a
> remote attacker to execute arbitrary code with the privileges
> of the sendmail daemon, typically root.
This advisory was issued on March 29, 2003. That was /*sixteen*/ MONTHS
ago . . . C'mon, guys!
--
George W. Capehart
Key fingerprint: 3145 104D 9579 26DA DBC7 CDD0 9AE1 8C9C DD70 34EA
"With sufficient thrust, pigs fly just fine." -- RFC 1925