BugTraq
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 24 2006 09:53PM
Eric Allman eric+bugtraq@neophilic.com (eric+bugtraq neophilic com) (1 replies)
Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow) Mar 26 2006 01:15AM
Gadi Evron (ge linuxbox org)
Eric Allman wrote:
>> I know the guy who exploited it. He's better than you think he is.
>
>
> I'm sorry, I was not trying to imply in any way that Mark was blowing
> smoke. I believe he can do it. Take my statement literally: /we/ don't
> /see/ how it can be practical. Perhaps I should have said "understand"
> instead of "see". The point was that this is not a trivial problem to
> exploit. But yes, I do believe it is real, and I think (hope) I made
> that clear in my message.

2 public exploits and counting.

Gadi.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus