Bug#818897: Exim4 change CWD string to /

2016-06-05 Thread Серж ИвановЪ
On Thu, 21 Apr 2016 19:30:15 +0200 Andreas Metzler wrote: > On 2016-04-20 Roman Bulakh wrote: > > On 2016-03-27 Andreas Metzler wrote: > >> On 2016-03-21 Roman Bulakh wrote: > >>> Package: exim4 > >>> Version:

Bug#818897: Exim4 change CWD string to /

2016-04-21 Thread Andreas Metzler
On 2016-04-20 Roman Bulakh wrote: > On 2016-03-27 Andreas Metzler wrote: >> On 2016-03-21 Roman Bulakh wrote: >>> Package: exim4 >>> Version: 4.80-7+deb7u2 >>> After updates exim to version 4.80-7+deb7u2 exim.c change CWD dir to /

Bug#818897: Exim4 change CWD string to /

2016-03-27 Thread Andreas Metzler
On 2016-03-21 Roman Bulakh wrote: > Package: exim4 > Version: 4.80-7+deb7u2 > After updates exim to version 4.80-7+deb7u2 exim.c change CWD dir to / > on startup. > Checking cwd=/some/vay was a popular heuristic for > identifying the source of malware sending email. >

Bug#818897: Exim4 change CWD string to /

2016-03-21 Thread Roman Bulakh
Package: exim4 Version: 4.80-7+deb7u2 After updates exim to version 4.80-7+deb7u2 exim.c change CWD dir to / on startup. Checking cwd=/some/vay was a popular heuristic for identifying the source of malware sending email. The output would look something like this: 2016-03-04 11:46:22 cwd=/root