BugTraq
SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 23 2006 09:41AM
Gadi Evron (ge linuxbox org) (5 replies)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 24 2006 04:27AM
Eric Allman eric+bugtraq (at) neophilic (dot) com [email concealed] (eric+bugtraq neophilic com) (1 replies)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 24 2006 03:08AM
Claus Assmann ca+bugtraq (at) zardoc.endmail (dot) org [email concealed] (ca+bugtraq zardoc endmail org) (2 replies)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 24 2006 02:52AM
Theo de Raadt (deraadt cvs openbsd org) (2 replies)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 24 2006 05:53PM
Gadi Evron (ge linuxbox org) (2 replies)
RE: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 24 2006 11:31PM
Michael A Fusaro II (maf mafii com)
Theo de Raadt wrote:
> > You would probably expect me to the be last person to say
> > that Sendmail is perfectly within their rights. I have
> > had a lot of problems with what they are doing.
> >
> > But what did you pay for Sendmail? Was it a dollar, or was
> > it more? Let me guess. It was much less than a dollar. I
> > bet you paid nothing.
> >
> > So does anyone owe you anything, let alone a particular process
> > which you demand with such length?
>
Gadi Evron wrote:
> So you are basically saying open source free software can't
> be trusted to hold high standards or be reliable or secure
> if I don't pay for it?

What he is basically saying is that you hold no right whatever
to demand it.

The "International Infrastructure's" need doesn't constitute
a claim on Sendmail or its developers. As Theo stated, if
that's unacceptable, buy software with a commercial license
(which would then give you the right to demand that trust, as
included in the license).

--
Michael A Fusaro II
maf (at) mafii (dot) com [email concealed]

[ reply ]
trusting SMTP [was: SendGate: Sendmail Multiple Vulnerabilities] Mar 23 2006 09:59AM
Gadi Evron (ge linuxbox org) (1 replies)


 

Privacy Statement
Copyright 2010, SecurityFocus