Re: An exploit for linux mh ver 6.8.4-5 ( update ) ...

From: Miquel van Smoorenburg (miquelsat_private)
Date: Sat Mar 21 1998 - 13:55:31 PST

  • Next message: Lynn Kyle: "MS Personal Web Server"

    In article <Pine.LNX.3.96.980321161207.2339A-100000at_private>,
    Erik Troan <ewtat_private> wrote:
    >On Sat, 21 Mar 1998, Catalin Mitrofan wrote:
    >
    >> host (user):~>. .mh_profile
    >> bash#
    >
    >Thanks for finding this -- I just put a fix on ftp.redhat.com.
    
    I've tried this with the Debian mh_6.8.4-17 package, and nothing happens.
    (It prints a lot of junk and then exits).  Also, mh_check is installed setgid
    mail, not setuid root.
    
    Mike.
    --
     Miquel van Smoorenburg | Our vision is to speed up time,
        miquelsat_private  |   eventually eliminating it.
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:46:41 PDT