Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

[Russell Nelson]

Pavel Kankovsky writes:
 > On Wed, 26 Jan 2000, Russell Nelson wrote:
 > 
 > > Maybe.  Maybe not.  But splogger isn't a setuid program and needn't be 
 > > run as root (unlike qmail-send).
 > 
 > 1. qmail-popup is a setuid program?

No, howeer syslog is often used by daemons, and some daemons run setuid.

 > 2. qmail-send is run as root?

Yup.  Well, qmail-start is run as root.  Along the line it gives up
its rootness, becoming qmail-send, and leaving only qmail-lspawn
running as root.

-- 
-russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
Crynwr sells support for free software  | PGPok | "Ask not what your country
521 Pleasant Valley Rd. | +1 315 268 1925 voice | can force other people to
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | do for you..."  -Perry M.