OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[suse-security] Sendmail 8.12.3-75 exploit

From: Paulo Melo (pmeloccr-c.pt)
Date: Thu Jun 26 2003 - 10:54:43 CDT

hi all,
for the last weeks I was detecting a problem in my sendmail MTA.
This is some lines from my sendmail.log

Jun 26 16:28:27 smtp sendmail[1545]: h5QFSPiQ001545: from=<>, size=0,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=omr-r09.mx.aol.com
[152.163.225.154]
Jun 26 16:28:51 smtp sendmail[1550]: h5QFSgiQ001550: from=<>, size=4529,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=gandalf.warpdrive.net
[24.56.130.20]
Jun 26 16:32:38 smtp sendmail[1607]: h5QFWXiQ001607: from=<>, size=0,
class=0, nrcpts=0, proto=SMTP, daemon=MSA, relay=mx1.thebiz.net [216.238.0.21]
Jun 26 16:34:34 smtp sendmail[1630]: h5QFYWiQ001630: from=<>, size=0,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=omr-r09.mx.aol.com
[152.163.225.154]
Jun 26 16:34:55 smtp sendmail[1633]: h5QFYriQ001633: from=<>, size=5120,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=smtp03.infoave.net
[165.166.0.28]
Jun 26 16:36:20 smtp sendmail[1644]: h5QFaHiQ001644: from=<>, size=4693,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=e35.co.us.ibm.com
[32.97.110.133]
Jun 26 16:38:15 smtp sendmail[1653]: h5QFcDiQ001653: from=<>, size=3302,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=blackbox.inta.net
[194.70.70.70]
Jun 26 16:42:27 smtp sendmail[1713]: h5QFgPiQ001713: from=<>, size=3453,
class=0, nrcpts=0, proto=ESMTP, daemon=MSA, relay=fep21.swip.net
[130.244.199.149]

I'm using SuSE 8.0 version with sendmail 8.12.3-75, and I implemented some
modifications in linux.mc in order to activate dnsbl, and so far is ok.
I made some open relay test and I'm sure that every thing is well done....
Does any one know how to solve this problem?

Paulo Jorge de Melo
Gabinete de Informática e Estatística
Comissão de Coordenação da Região Centro
_________________________________________________________________________________________________
"What? You search? You would multiply yourself by ten, by a hundred? You
seek followers? Seek zeros! "- Nietzsche