[Raw Msg Headers][Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Lattest sendmail problem ...



On Sun, Mar 30, 2003 at 11:32:15PM +0300, Matti Aarnio wrote:
> Again some syntax-scanner buffer overflow thing:
>   http://www.cert.org/advisories/CA-2003-12.html

BUGTRAQ item:
  http://www.securityfocus.com/archive/1/316773/2003-03-28/2003-04-03/0

explains it some more.  Bad promotion of byte 0xFF to -1 could sometimes
be used in form allowing overflow of scanner buffer.   ZMailer will
(in pass-thru) definitely deactivate such messages rendering them
inactive.

-- 
/Matti Aarnio	<mea@nic.funet.fi>
-
To unsubscribe from this list: send the line "unsubscribe zmailer" in
the body of a message to majordomo@nic.funet.fi