mailing list archives
Re: Security problem in C news and INN
From: shipley () merde dis org (Evil Pete)
Date: Thu, 24 Feb 1994 11:27:33 -0800
Evil Pete says:
so, give details.
there are shell scripts in Cnews and INN that pass the message to
ucbMail, where one can do ~ escapes.
Would simply replacing with /bin/mail fix this?
I am not sure, (since I no longer runa news site), but if you can the
full patch set it will be fixed.
Re: Security problem in C news and INN Rafi Sadowsky (Feb 25)