From owner-freebsd-questions Sat Jun 16 14:49: 4 2001 Delivered-To: freebsd-questions@freebsd.org Received: from shumai.marcuscom.com (rdu26-228-058.nc.rr.com [66.26.228.58]) by hub.freebsd.org (Postfix) with ESMTP id 9BBB637B406 for ; Sat, 16 Jun 2001 14:48:55 -0700 (PDT) (envelope-from marcus@marcuscom.com) Received: from localhost (marcus@localhost) by shumai.marcuscom.com (8.11.3/8.11.3) with ESMTP id f5GLmo223794; Sat, 16 Jun 2001 17:48:50 -0400 (EDT) (envelope-from marcus@marcuscom.com) X-Authentication-Warning: shumai.marcuscom.com: marcus owned process doing -bs Date: Sat, 16 Jun 2001 17:48:50 -0400 (EDT) From: Joe Clarke To: Irwan Hadi Cc: Subject: Re: pine security In-Reply-To: <20010616154739.C1768@phxby.com> Message-ID: <20010616174803.N7846-100000@shumai.marcuscom.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG It was just recently noticed and corrected by FreeBSD. As far as I know, if you compile pine out of the box on any other platform, it will still put the OS type and compiler type in the message ids. Joe Clarke On Sat, 16 Jun 2001, Irwan Hadi wrote: > On Sat, Jun 16, 2001 at 11:24:00AM -0600, Joe Clarke wrote: > > > pine has had some security exploits. Most recently it was noticed that > > pine included the compiler and OS type in its message ids. This has been > > changed. Take a look at this message. I use the latest pine-4.33_1 port, > > and have never had any problems. > > If you said that including OS type in the header cause a security problem, and > this was "most recently" noticed, I don't think this is correct, because at > least from 4 years ago I start "playing" internet, pine always put the OS type > in the header. Why people just "noticed" it now ? > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message