Re: Root shell vixie cron exploit

[Christos Zoulas]

On Sep 1,  9:08pm, [EMAIL PROTECTED] (Seva Gluschenko) wrote:
-- Subject: Re: Root shell vixie cron exploit

| The following address has permanent fatal errors:
| -C/tmp/vixie-cf gvs
|
| So, sendmail _really_ refuses to accept -C key when run as root

You've reached the wrong conclusion. *BSD's cron uses -t and passes
recipients through stdin (which is TRT), instead of kluges to parse
MAILTO and ignore things that start with -.

christos