URGENT: Major newe sendmail bug effects all commercial and free versions.

David Mandala plug-discuss@lists.plug.phoenix.az.us
03 Mar 2003 12:04:29 -0700


Yep, sendmail once again strikes, granted it has been a while but they
can't get away from it.

For those of you who insist on running sendmail and are running any of
the below:
 
Affected versions of Sendmail products:

    -- All commercial releases including Sendmail Switch, Sendmail
Advanced Message Server (which includes the Sendmail Switch MTA),
Sendmail for NT and Sendmail Pro

    -- Sendmail open source versions 5.79 up to the most recent version,
8.12.7

    -- Other vendor versions based on Sendmail open source

Quickly see:

http://www.businesswire.com/cgi-bin/f_headline.cgi?bw.030303/230625669&ticker=ISSX

If you are running Red Hat the fix is available see:

http://lwn.net/Articles/24201/

Personally I strongly recommend moving away from Sendmail ASAP, postfix
and qmail are far more secure.

Cheers,

Davidm
-- 
David IS Mandala
gpg fingerprint 8932 E7EF CCF5 1B8C 1B5C A92E C678 795E 45B2 D952
Phoenix, AZ (480) 460-7545 HP, (602) 741-1363 CP
http://www.them.com/~davidm/