Re: [Exim] Like in the good old times ... (sendmail exploit)

Página superior
Eliminar este mensaje
Responder a este mensaje
Autor: Nico Erfurth
Fecha:  
A: Alan Thew
Cc: exim-users@exim.org
Asunto: Re: [Exim] Like in the good old times ... (sendmail exploit)
On Sun, 30 Mar 2003, Alan Thew wrote:

> > Another day, another sendmail exploit.
>
> don't gloat :-)


:-)

> > deny message = Another day, another sendmail bug
> >      condition = ${if match{$message_headers}{\xff}{1}{0}}

>
> Our older machines still run 3.36 , I assume this can be done in a filter?


should be possible with something like

if "$message_headers" contains "\xff" then
fail "Sendmail exploit detected"
endif

No promises :)


Nico