Re: [RHSA-1999:030-01] Buffer overflow in cron daemon

• Previous message: Martin Schulze: "Re: Debian not vulnerable to recent cron buffer overflow"
• Maybe in reply to: Bill Nottingham: "[RHSA-1999:030-01] Buffer overflow in cron daemon"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> > Why not just have sendmail run as the user who owns the crontab?
> > I see no credible reason to run it as root.  This is fairly
> > simple as do_command and cron_popen are only used to send mail
> > anyway.
>
> That should be "cron_popen is only used to send mail anyway".
>
>  - todd

Silly question but does this crontab bug affect those of us running
qmail or postfix? I would assume yes but don't have the time to test
it. If anyone does/has I would be interested to hear.

- -Kurt Seifried
https://www.seifried.org/lasg/
http://securityportal.com/closet/
"Anyone interested in investing in a data haven satellite?"



-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 for non-commercial use <http://www.pgp.com>

iQA/AwUBN8oiGIb9cm7tpZo3EQKMAgCgz7cqslQQAYj3mUC9Izcf15FhmqgAn32p
fcksKiSFW7A606U5YROFFqVI
=zH7d
-----END PGP SIGNATURE-----

• Next message: L. Sassaman: "Local DoS in FreeBSD"
• Previous message: Martin Schulze: "Re: Debian not vulnerable to recent cron buffer overflow"
• Maybe in reply to: Bill Nottingham: "[RHSA-1999:030-01] Buffer overflow in cron daemon"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:59:57 PDT