Netwinsite (www.netwinsite.com) just released a new version of Dmail - 2.7r
which fixes this exploit. It is available at
ftp://ftp.netwinsite.com/pub/dmail/ . Currently, there are only Linux and
Solaris versions available.
Zac Cogswell
cogswell_at_msu.edu
At 05:02 AM 6/2/2000 +0300, you wrote:
>/*
>Netwin DSMTP Server v2.7q remote-root exploit
>noir_at_gsu.linux.org.tr | noir_at_olympos.org
>
>writen just for fun : ) heh,
>tested arch = x86/Linux mdk7.0
>I will port this to Solaris & FreeBSD when I have time...
>check http://gsu.linux.org.tr/~noir/ offsets for other Linux distros.
>
>greetz: moog, si_ (happy birthday!), CronoS, still, teso crew,
>gsu-linux, `B, calaz, olympos secteam
>
>FOUND BY Eric Andry eric_at_wincom.net
>*/
*snip*
Received on Jun 06 2000