OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1994: Re: Security problem in C news and INN

Re: Security problem in C news and INN

hoodrhoodr.slip.netcom.com
Sun, 27 Feb 1994 19:06:34 +0000 

>In message <199402261422.AA03742tavor.openu.ac.il>, Rafi Sadowsky writes:
>>Jeroen Scheerder wrote:
>....
>>now on BSD/386 for example /usr/bin/mail is the ucb one - which is probably
>>where the hole comes from ?
>
>I just tested it under NetBSD, which I would suppose also has the ucb one,
>and the tilda escapes are *not* processed for non-interactive mailings.  I
>feel this is also very likely the case with BSD/386 (I can't test that until
>next week sometime).

I get the following from BSDI 1.0's man page:

     -I    Forces mail to run in interactive mode even when input isn't a ter-
           minal.  In particular, the `~' special character when sending mail
           is only active in interactive mode.

Also, SunOS has this interesting flag:

     -r address    Pass address  to  network  delivery  software.
                   All tilde (~) commands are disabled.