2002-10-13
Published: 2002-10-14 18:17:53
Updated: 2002-10-14 18:17:53
- - -------------------------------------------------------------------- GENTOO LINUX SECURITY ANNOUNCEMENT - - -------------------------------------------------------------------- PACKAGE :sendmail SUMMARY :smsrh bypass vulnerabilites DATE :2002-10-13 14:45 UTC - - -------------------------------------------------------------------- It is possible for an attacker to bypass the restrictions imposed by The Sendmail Consortium^Òs Restricted Shell (SMRSH) and execute a binary of his choosing by inserting a special character sequence into his .forward file. Read the full advisory at http://www.sendmail.org/smrsh.adv.txt SOLUTION It is recommended that all Gentoo Linux users who are running net-mail/sendmail-8.12.6 and earlier update their systems as follows: emerge rsync emerge sendmail emerge clean - - -------------------------------------------------------------------- aliz@gentoo.org - GnuPG key is available at www.gentoo.org/~aliz - - --------------------------------------------------------------------
