lug-bg: Sendmail: -1 gone wild

2003-03-30 Thread Nickola Kolev
From: Michal Zalewski [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Sendmail: -1 gone wild CVE: CAN-2003-0161 CERT: VU#897604 There is a vulnerability in Sendmail versions 8.12.8 and prior. The address parser performs insufficient bounds checking in certain conditions due to a char to int

Re: lug-bg: Sendmail: -1 gone wild

2003-03-30 Thread Georgi Chorbadzhiyski
Nickola Kolev wrote: From: Michal Zalewski [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Sendmail: -1 gone wild CVE: CAN-2003-0161 CERT: VU#897604 There is a vulnerability in Sendmail versions 8.12.8 and prior. The address parser performs insufficient bounds checking in certain