OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1994: Re: Security problem in C news and INN

Re: Security problem in C news and INN

Evil Pete (shipleymerde.dis.org)
Thu, 24 Feb 1994 11:27:33 -0800 

>
>Evil Pete says:
>> >so, give details.
>> >
>> >Scott
>>
>>
>> there are shell scripts in Cnews and INN that pass the message to
>> ucbMail, where one can do ~ escapes.
>
>Would simply replacing with /bin/mail fix this?
>


I am not sure, (since I no longer runa news site), but if you can the
full patch set it will be fixed.