Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 17 Nov 1996 20:57:45 -0800
From:      Don Lewis <Don.Lewis@tsc.tdk.com>
To:        Adam Shostack <adam@homeport.org>, msmith@atrad.adelaide.edu.au (Michael Smith)
Cc:        freebsd-security@freebsd.org
Subject:   Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2).
Message-ID:  <199611180457.UAA14688@salsa.gv.ssi1.com>
In-Reply-To: Adam Shostack <adam@homeport.org> "Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2)." (Nov 17, 10:35pm)

next in thread | previous in thread | raw e-mail | index | archive | help
On Nov 17, 10:35pm, Adam Shostack wrote:
} Subject: Re: BoS: Exploit for sendmail smtpd bug (ver. 8.7-8.8.2).
} smap/smapd (from the TIS firewall toolkit) can handle mail delivery
} services & binding to port 25.  They're designed for security.

But they don't do ESMTP, smapd relies on sendmail to forward the
mail onto it's next hop, and I think smap/smapd also fell prey to
the syslog() hole (though the damage they could potentially do is
quite limited).

			---  Truck



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199611180457.UAA14688>