From owner-freebsd-ports Thu Jun 24 15:50:44 1999 Delivered-To: freebsd-ports@freebsd.org Received: from ch.lakecountry.net (ch.lakecountry.net [208.161.201.10]) by hub.freebsd.org (Postfix) with ESMTP id B3E6E156A8; Thu, 24 Jun 1999 15:50:32 -0700 (PDT) (envelope-from trix@gatekeep.net) Received: from mail (irconly@as5200-tyr1-ppp105.lakecountry.net [208.161.201.105]) by ch.lakecountry.net (8.9.1/8.9.1) with SMTP id RAA15915; Thu, 24 Jun 1999 17:50:30 -0500 From: trix@gatekeep.net Message-ID: <003a01bebe92$962a2680$69c9a1d0@mail.gatekeep.net> Reply-To: To: Cc: Subject: Re: hhp: Remote pine exploit. (fwd) Date: Thu, 24 Jun 1999 17:40:38 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0037_01BEBE68.AC3FEF60" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 4.72.3110.1 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is a multi-part message in MIME format. ------=_NextPart_000_0037_01BEBE68.AC3FEF60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable They are saying any version to current 4.10 is Bugged.... I have not tried it, but it does say freebsd and BSD/i is not protected from the latest bug. Best thing to do, is update your ports, and make deinstall ; make install pine (the ports have 4.10 in them now) ******************************************************************* Gate Keeper Technologies Brandon Hicks System Administrator bhicks@gatekeep.net - Personal freebsd@gatekeep.net - FreeBSD Lists/Help (903)882-9559 www.gatekeep.net ******************************************************************* -----Original Message----- From: Adrian Penisoara To: Igor Roshchin Cc: imp@FreeBSD.ORG ; ports@FreeBSD.ORG = Date: Thursday, June 24, 1999 9:03 AM Subject: Re: hhp: Remote pine exploit. (fwd) >Hi, > >On Wed, 23 Jun 1999, Igor Roshchin wrote: > >> >> Hello! >> >> >> FYI. (in case you haven't seen this advisory yet) > > I remember there has been another similar exploit announced in = February >and the Pine people patched it soon after by disallowing use of the >mailcap.. BTW, (I think) we can't be affected since we don't have a >system-wide mailcap file. > >> >> Also: is pine 3.96 effected by this ? > > That remains to be seen, although I don't believe it has the necessary >features implemented. > > I'll check it out tommorow in detail, right now I've got network = problems >here and can't do a thing... > >> >> >> Regards, >> >> Igor >> >> > > Thanks, > Ady (@freebsd.ady.ro) > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-ports" in the body of the message > ------=_NextPart_000_0037_01BEBE68.AC3FEF60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

They are saying any version to current 4.10 is Bugged....
I have = not=20 tried it, but it does say freebsd and BSD/i is
not protected from the = latest=20 bug. Best thing to do, is update
your ports, and make deinstall = ; make=20 install pine (the ports
have 4.10 in them=20 now)

*************************************************************= ******
Gate=20 Keeper Technologies
Brandon Hicks System Administrator
bhicks@gatekeep.net - = Personal
freebsd@gatekeep.net - FreeBSD=20 Lists/Help
(903)882-9559
www.gatekeep.net
****************= ***************************************************

-----Original = Message-----
From: Adrian Penisoara <ady@freebsd.ady.ro>
To: = Igor Roshchin=20 <igor@physics.uiuc.edu>
Cc= :=20 imp@FreeBSD.ORG <imp@FreeBSD.ORG>; ports@FreeBSD.ORG <ports@FreeBSD.ORG>
Date: = Thursday,=20 June 24, 1999 9:03 AM
Subject: Re: hhp: Remote pine exploit.=20 (fwd)

>Hi,
>
>On Wed, 23 Jun 1999, Igor = Roshchin=20 wrote:
>
>>
>>=20 Hello!
>>
>>
>> FYI. (in case you haven't = seen this=20 advisory yet)
>
> I remember there has been another similar = exploit=20 announced in February
>and the Pine people patched it soon after = by=20 disallowing use of the
>mailcap.. BTW, (I think) we can't be = affected=20 since we don't have a
>system-wide mailcap=20 file.
>
>>
>> Also: is pine 3.96 effected by = this=20 ?
>
> That remains to be seen, although I don't believe it = has the=20 necessary
>features implemented.
>
> I'll check it out = tommorow in detail, right now I've got network problems
>here and = can't do=20 a thing...
>
>>
>>
>>=20 Regards,
>>
>> = Igor
>>
>>
>
>=20 Thanks,
> Ady (@freebsd.ady.ro)
>
>
>
>To=20 Unsubscribe: send mail to majordomo@FreeBSD.org
>wi= th=20 "unsubscribe freebsd-ports" in the body of the=20 message
>

------=_NextPart_000_0037_01BEBE68.AC3FEF60-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message