OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 2nd quarter (Apr-Jun) 1995: Re: Don't want to replace IDA sendmail

Re: Don't want to replace IDA sendmail

Catherine Allen (Catherine.Allenmailbox.uq.oz.au)
Fri, 19 May 1995 11:54:41 +1000 (GMT+1000)

> > I believe this advisory refers to newlines in the From part of a message.
> > By specifying sendmail -F, a user can supply a string as the From name for
> > a message.

No, it doesn't.  That was covered in a previous advisory (CA-95:05) which 
is available from CERT.  This is something different.
 
> Can somebody shed some light on this problem?  

This problem is reported for version 5 of sendmail and doesn't (yet) 
*appear* to affect v8.  In fact, using Eric Allman's v8 is listed as a 
workaround.

If you don't want to replace IDA sendmail, then ring your local IDA rep 
and hassle them until they hand you a patch.  Then install it immediately.

Catherine.  I speak for myself only.