From owner-freebsd-security Thu Apr 11 22:58:54 2002 Delivered-To: freebsd-security@freebsd.org Received: from lariat.org (lariat.org [12.23.109.2]) by hub.freebsd.org (Postfix) with ESMTP id 0935637B400 for ; Thu, 11 Apr 2002 22:58:52 -0700 (PDT) Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2]) by lariat.org (8.9.3/8.9.3) with ESMTP id XAA19648; Thu, 11 Apr 2002 23:58:16 -0600 (MDT) X-message-flag: Warning! Use of Microsoft Outlook may make your system susceptible to Internet worms. Message-Id: <4.3.2.7.2.20020411235129.00ba5bc0@nospam.lariat.org> X-Sender: brett@nospam.lariat.org X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 11 Apr 2002 23:58:03 -0600 To: Przemyslaw Frasunek , security@FreeBSD.ORG From: Brett Glass Subject: Re: [Corrected message] This OpenBSD local root hole may affect some FreeBSD systems In-Reply-To: <20020412074657.K58987@lagoon.freebsd.lublin.pl> References: <4.3.2.7.2.20020411141011.030a0b80@nospam.lariat.org> <4.3.2.7.2.20020411141011.030a0b80@nospam.lariat.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org At 11:46 PM 4/11/2002, Przemyslaw Frasunek wrote: >FreeBSD's /usr/bin/mail doesn't accept ~! when working in non-interactive >mode. That's good to know! It looks as if NetBSD and Darwin have this feature as well. But SunOS 5.8 doesn't (at least according to the docs at http://www.freebsd.org/cgi/man.cgi?query=mail&apropos=0&sektion=0&manpath=SunOS+5.8&format=html), so Solaris may be vulnerable. --Brett To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message