Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: Security problem in C news and INN
From: shipley () merde dis org (Evil Pete)
Date: Thu, 24 Feb 1994 11:27:33 -0800



Evil Pete says:
so, give details.

Scott


there are shell scripts in Cnews and INN that pass the message to
ucbMail, where one can do ~ escapes.

Would simply replacing with /bin/mail fix this?



I am not sure, (since I no longer runa news site), but if you can the
full patch set it will be fixed.



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]