Re: About rpc.* programs and SIGUSR1 signal...

From: Chris Frey (cdfreyat_private)
Date: Sat Sep 26 1998 - 09:21:40 PDT

Next message: Leshka: "Root exploit for SCO OpenServer."

Previous message: Kragen: "Re: tar "features""
Maybe in reply to: ga: "About rpc.* programs and SIGUSR1 signal..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Fri, 25 Sep 1998, ga wrote:

> Finally, this reminded me of an old DoS that I found long time ago but I
> never
> released it (sorry if it is already known). This was based on the same
> USR1
> signal. When sendmail receives a SIGUSR1 signal, it dumps some infos in
> the
> /var/log/debug file. As sendmail is suid then it runs with root
[snip]
> I tried this on sendmail 8.8.0 (as I told you above, it has been a
> longtime).

I checked my copies of sendmail-8.8.6 and sendmail-8.9.1 that I had
available and it looks to me like it uses syslog to do the state dump on a
SIGUSR1.

I don't have 8.8.0 to check with, but perhaps syslog was setup to write
LOG_DEBUGs to /var/log/debug?

- Chris

Next message: Leshka: "Root exploit for SCO OpenServer."
Previous message: Kragen: "Re: tar "features""
Maybe in reply to: ga: "About rpc.* programs and SIGUSR1 signal..."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:17:49 PDT