mailing list archives
From: seclabs () NAI COM (NAI Labs)
Date: Tue, 22 Feb 2000 19:11:38 -0800
-----BEGIN PGP SIGNED MESSAGE-----
All versions of the publicly available MMDF prior to version
2.44.b4 are vulnerable. The version of MMDF distributed with SCO
OpenServer was found to be vulnerable, and NAI's advisory was based
on this information.
The latest stable version is 2.44 and NOT 2.43 as previously stated.
The latest version of MMDF, which has not been vulnerable to these
attacks for some time, has been recently updated and is available at:
- -rw-r--r-- 1 mmdf mail 1416811 Feb 21 22:59 mmdf-2.44-final.tar.gz
Also, as previously mentioned, patches for the vulnerable version
shipped with SCO OpenServer are available from:
Please feel free to contact us with any additional questions.
NAI Security Labs
seclabs () nai com
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1
Comment: Crypto Provided by Network Associates <http://www.nai.com>
-----END PGP SIGNATURE-----
- MMDF Cave, Glynis (Feb 21)
- <Possible follow-ups>
- Re: MMDF NAI Labs (Feb 23)