Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Andres Salomon
Aside from the fact that it's a pretty big IF; I'm not aware of too many mail clients that use pagers. mutt uses vi, pine uses pico, X based MUAs certainly don't use most.. perhaps mail(x) or something similar use it, but that's not all too common. Certainly not enough, IMO, to classify this as

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Tim van Erven
On Tue, Sep 18, 2001 at 05:22:41PM -0400, Andres Salomon [EMAIL PROTECTED] wrote: On Tue, Sep 18, 2001 at 05:01:59PM -0400, Aaron M. Ucko wrote: Andres Salomon [EMAIL PROTECTED] writes: How is this a remote exploit? If I know somebody uses most as a pager for mail, I can send

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Andres Salomon
My point is, it's not a daemon, it's not associated w/ any type of network service, it's not associated w/ any clients that regularly receive untrusted data from outside sources, and it's not even used by default on most people's boxes (less, if installed, will be used instead of most by

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Vineet Kumar
* Andres Salomon ([EMAIL PROTECTED]) [010918 17:40]: My point is, it's not a daemon, it's not associated w/ any type of network service, it's not associated w/ any clients that regularly receive untrusted data from outside sources, and it's not even used by default on most people's boxes

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Andres Salomon
Aside from the fact that it's a pretty big IF; I'm not aware of too many mail clients that use pagers. mutt uses vi, pine uses pico, X based MUAs certainly don't use most.. perhaps mail(x) or something similar use it, but that's not all too common. Certainly not enough, IMO, to classify this as

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Craig Dickson
Andres Salomon wrote: Aside from the fact that it's a pretty big IF; I'm not aware of too many mail clients that use pagers. mutt uses vi pager != editor. Mutt has a built-in pager but can be configured to use an external one if you prefer. Craig

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Micah Anderson
Not all mutt users use vi, as a pager I use most, as an editor I use jed. These things can be configured. On Tue, 18 Sep 2001, Andres Salomon wrote: Aside from the fact that it's a pretty big IF; I'm not aware of too many mail clients that use pagers. mutt uses vi, pine uses pico, X based

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Tim van Erven
On Tue, Sep 18, 2001 at 05:22:41PM -0400, Andres Salomon [EMAIL PROTECTED] wrote: On Tue, Sep 18, 2001 at 05:01:59PM -0400, Aaron M. Ucko wrote: Andres Salomon [EMAIL PROTECTED] writes: How is this a remote exploit? If I know somebody uses most as a pager for mail, I can send

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Andres Salomon
My point is, it's not a daemon, it's not associated w/ any type of network service, it's not associated w/ any clients that regularly receive untrusted data from outside sources, and it's not even used by default on most people's boxes (less, if installed, will be used instead of most by default).

Re: [SECURITY] [DSA 076-1] New most packages available

2001-09-18 Thread Vineet Kumar
* Andres Salomon ([EMAIL PROTECTED]) [010918 17:40]: My point is, it's not a daemon, it's not associated w/ any type of network service, it's not associated w/ any clients that regularly receive untrusted data from outside sources, and it's not even used by default on most people's boxes