OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 3rd quarter (Jul-Aug) 1995: Re: CERT Alert on new sendmail bug - any info?

Re: CERT Alert on new sendmail bug - any info?

Ben Golding (bggconnect.com.au)
Mon, 21 Aug 1995 11:10:16 +1000 

> It's a shame to have to give up IDA....  V8 doesn't do username-hiding
> nearly as well.

I have ported the IDA kit to sendmail 8.6.12, although it does require
a small patch to the source.  You can pick up the IDA extensions from
ftp.connect.com.au:pub/mail/sendmail.8.6.12.ida.tar.Z.

The patch changes some of sendmail-8's ruleset handling and I don't
believe it affects the underlying security of the program.

Username hiding works fine in this version.

        Ben.