According to Jonathan Stott:
>
>A better fix would be to use procmail, or /bin/mail, or some other
>program for local mail delivery.
>
A lot of people have been recommending putting procmail in to perform
filtering of mail as an adjunct to sendmail. I did a quick grep for
the notorious strc{at,py} commands in the procmail source and found
quite a few. I have not analysed the code but people putting in
filters now to prevent the recent problems with mime et al could be
(I said _could_be_) leaving themselves open for a more subtle exploit
later on via procmail overflows.
--
Brett Lymn, Computer Systems Administrator, British Aerospace Australia
===============================================================================
And the monks would cry unto them, "Keep the bloody noise down!"
- Mort, Terry Pratchett.
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:11:58 PDT