Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Jun 2001 17:48:50 -0400 (EDT)
From:      Joe Clarke <marcus@marcuscom.com>
To:        Irwan Hadi <irwanhadi@phxby.com>
Cc:        <freebsd-questions@FreeBSD.ORG>
Subject:   Re: pine security
Message-ID:  <20010616174803.N7846-100000@shumai.marcuscom.com>
In-Reply-To: <20010616154739.C1768@phxby.com>

next in thread | previous in thread | raw e-mail | index | archive | help
It was just recently noticed and corrected by FreeBSD.  As far as I know,
if you compile pine out of the box on any other platform, it will still
put the OS type and compiler type in the message ids.

Joe Clarke

On Sat, 16 Jun 2001, Irwan Hadi wrote:

> On Sat, Jun 16, 2001 at 11:24:00AM -0600, Joe Clarke wrote:
>
> > pine has had some security exploits.  Most recently it was noticed that
> > pine included the compiler and OS type in its message ids.  This has been
> > changed.  Take a look at this message.  I use the latest pine-4.33_1 port,
> > and have never had any problems.
>
> If you said that including OS type in the header cause a security problem, and
> this was "most recently" noticed, I don't think this is correct, because at
> least from 4 years ago I start "playing" internet, pine always put the OS type
> in the header. Why people just "noticed" it now ?
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010616174803.N7846-100000>