Bugtraq: Re: Root shell vixie cron exploit

[christos () ZOULAS COM (Christos Zoulas)]

On Sep 1,  9:08pm, gvs () RINET RU (Seva Gluschenko) wrote:
-- Subject: Re: Root shell vixie cron exploit

| The following address has permanent fatal errors:
| -C/tmp/vixie-cf gvs
|
| So, sendmail _really_ refuses to accept -C key when run as root

You've reached the wrong conclusion. *BSD's cron uses -t and passes
recipients through stdin (which is TRT), instead of kluges to parse
MAILTO and ignore things that start with -.

christos