OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 1st quarter (Jan-Mar) 1998: Re: KSR[T] Advisory #7: filter

Re: KSR[T] Advisory #7: filter

hurtta+zzozone.FMI.FI
Sun, 1 Feb 1998 16:18:56 +0200 

KSR[T]:
>                      The filter included in elm-2.4ME+37 also appears to
>                      be vulnerable to the "save_embedded_address()" attack,
>                      but not to the "get_filter_rules()" attack.

Note that any elm-2.4ME+ does _NOT_ install because security problems of it.

Changes of Elm2.4ME+ PL0 (25) compared to version Elm2.4 PL24 ME8b+
-------------------------------------------------------------------
<...>
        - Makefile now don't compile or install 'filter' because security
          problems in it.


/ Kari Hurtta