Tom Kistner wrote:

 > alberto barbaro wrote:
>> sh-2.05b$ echo "a" > a.txt && exim_dbmbuild a.txt `perl -e 'print"A"x5000'`
>> Segmentation fault

> (Hint: exim_dbmbuild is not installed setuid, 

This does stop it being a major security issue but doesn't stop it being 
a legitimate bug.

> nor is it invoked by a remote operation).

Although not in any remotely default configuration, it could effectively 
be in some setups, where generation of domainlists (or whatever) was 
scripted, and some of that data ultimately came from user input. I bet 
lots of people have exim_dbmbuild called in scripts one way or another. 
Sure, some input sanity checking should happen further up the chain, but 
nonetheless the problem probably should be fixed.

Tim

-- 
## List details at http://www.exim.org/mailman/listinfo/exim-dev Exim details 
at http://www.exim.org/ ##

Reply via email to