From owner-freebsd-ports  Thu Jun 24  7: 3: 4 1999
Delivered-To: freebsd-ports@freebsd.org
Received: from ady.warpnet.ro (unknown [194.102.224.1])
	by hub.freebsd.org (Postfix) with ESMTP
	id 323D214D25; Thu, 24 Jun 1999 07:02:55 -0700 (PDT)
	(envelope-from ady@freebsd.ady.ro)
Received: from localhost (ady@localhost)
	by ady.warpnet.ro (8.9.2/8.9.2) with ESMTP id RAA32281;
	Thu, 24 Jun 1999 17:15:43 +0300 (EEST)
	(envelope-from ady@freebsd.ady.ro)
Date: Thu, 24 Jun 1999 17:15:43 +0300 (EEST)
From: Adrian Penisoara <ady@freebsd.ady.ro>
X-Sender: ady@ady.warpnet.ro
To: Igor Roshchin <igor@physics.uiuc.edu>
Cc: imp@FreeBSD.ORG, ports@FreeBSD.ORG
Subject: Re: hhp: Remote pine exploit. (fwd)
In-Reply-To: <199906231759.MAA26866@alecto.physics.uiuc.edu>
Message-ID: <Pine.BSF.4.10.9906241709220.31798-100000@ady.warpnet.ro>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hi,

On Wed, 23 Jun 1999, Igor Roshchin wrote:

> 
> Hello!
> 
> 
> FYI. (in case you haven't seen this advisory yet)

 I remember there has been another similar exploit announced in February
and the Pine people patched it soon after by disallowing use of the
mailcap.. BTW, (I think) we can't be affected since we don't have a
system-wide mailcap file.

> 
> Also: is pine 3.96 effected by this ?

 That remains to be seen, although I don't believe it has the necessary
features implemented.

 I'll check it out tommorow in detail, right now I've got network problems
here and can't do a thing...

> 
> 
> Regards,
> 
> Igor
> 
> 

 Thanks,
 Ady (@freebsd.ady.ro)



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message