From owner-freebsd-questions Sat Jun 16 14:42:37 2001 Delivered-To: freebsd-questions@freebsd.org Received: from irwanhadi.dorms.usu.edu (irwanhadi.dorms.usu.edu [129.123.230.12]) by hub.freebsd.org (Postfix) with ESMTP id 9FD5137B401 for ; Sat, 16 Jun 2001 14:42:33 -0700 (PDT) (envelope-from irwanhadi@phxby.com) Received: by irwanhadi.dorms.usu.edu (Postfix, from userid 501) id 5EF40B4084; Sat, 16 Jun 2001 15:47:39 -0600 (MDT) Date: Sat, 16 Jun 2001 15:47:39 -0600 From: Irwan Hadi To: Joe Clarke Cc: freebsd-questions@freebsd.org Subject: Re: pine security Message-ID: <20010616154739.C1768@phxby.com> References: <20010616121259.A69988-100000@pukruppa.de> <20010616131740.N4205-100000@shumai.marcuscom.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010616131740.N4205-100000@shumai.marcuscom.com>; from marcus@marcuscom.com on Sat, Jun 16, 2001 at 11:24:00AM -0600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Sat, Jun 16, 2001 at 11:24:00AM -0600, Joe Clarke wrote: > pine has had some security exploits. Most recently it was noticed that > pine included the compiler and OS type in its message ids. This has been > changed. Take a look at this message. I use the latest pine-4.33_1 port, > and have never had any problems. If you said that including OS type in the header cause a security problem, and this was "most recently" noticed, I don't think this is correct, because at least from 4 years ago I start "playing" internet, pine always put the OS type in the header. Why people just "noticed" it now ? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message