Re: lug-bg: Sendmail vulnerability

[teodor@xxxxxxxxxxxxx (Teodor Georgiev)]

----- Original Message -----
From: "Georgi Chorbadzhiyski" <gf@xxxxxxxxxxx>
To: <lug-bg@xxxxxxxxxxxxxxxxxx>
Sent: Saturday, February 15, 2003 1:21 AM
Subject: Re: lug-bg: Sendmail vulnerability

> Konstantin Angelov wrote:
> >
> > Just an FYI. Proverqvaite za patch po chesto ot tuk natatuka - ne se
znae
> > tochno koga shte izleze oficialno tazi informacia na bql svqt
> >
> >
> > [snip]
> >
> > [02:35pm]<rrognlie> hey
> > [02:35pm]<rrognlie> yes, I know
> > [02:35pm]<rrognlie> and I've been sworn to not reveal anything until
> > either 1) it
> > [02:37pm]<scottm> <expletive deleted>
> > [02:37pm]<rrognlie> "there are national security issues that need to be
> > addressed
> >                     before it's announced"
> > [02:38pm]<jeffw> you're kidding?
> > [02:38pm]<rrognlie> the patch protects not only the MTA, but any
> > downstream MTAs
> >                     (which is nice)
> > [02:38pm]<mike_> "whitehouse.gov needs to patch their servers"
> >
> > [/snip]
>
> Ili za po-lesno ne izpolzvaite tozi piece of crap, narechen za
blagozvuchie
> "sendmail".
>

Georgi, ne si prav... i maika ti ne e prava... i cialata ti familia ne e
prava (kakto se kazvashe v edin vic).

1. Daite da vidim dali naistina e taka. Kato izleze exlpoita - shte govorim.
Inache remote exploit v Sendmail ne e imalo ot 8.8.5,  a tova e
blizo 4 godini.

2. V  Apache syshto imashe exploiti. v ssh imashe. v openssl imashe....
Haide da gi narechem crap????

3. Sendmail kato vseki softuer si ima predimstva i nedostatyci. A
predimstvoto i nedostatykyt sa kato krivite ogledala - vseki wizhda v tqh
razlichno neshto.
    Prosto gi slagash na kantara i predcenqvash: ako ti haresva -
"kupuvash", ako ne - otminavash.

  Na men sendmail si mi vyrshi prekrasna rabota, i ot poveche ot 2 godini ne
me e lygal. Postfix syshto e dobyr. Qmail syshto.
  Polzvam Sendmail, zashtoto s nego sym sviknal. I nikoga ne tvyrdq, che e
po-dobyr ot Qmail ili Postfix.

Zashto triabva da zapochvame s tia driazgi?

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================