Date: Mon, 5 Jun 2000 01:23:19 -0400 From: Zac Cogswell <cogswell@MSU.EDU> Subject: Re: Netwin's Dmail package To: BUGTRAQ@SECURITYFOCUS.COM Netwinsite (www.netwinsite.com) just released a new version of Dmail - 2.7r which fixes this exploit. It is available at ftp://ftp.netwinsite.com/pub/dmail/ . Currently, there are only Linux and Solaris versions available. Zac Cogswell cogswell@msu.edu At 05:02 AM 6/2/2000 +0300, you wrote: >/* >Netwin DSMTP Server v2.7q remote-root exploit >noir@gsu.linux.org.tr | noir@olympos.org > >writen just for fun : ) heh, >tested arch = x86/Linux mdk7.0 >I will port this to Solaris & FreeBSD when I have time... >check http://gsu.linux.org.tr/~noir/ offsets for other Linux distros. > >greetz: moog, si_ (happy birthday!), CronoS, still, teso crew, >gsu-linux, `B, calaz, olympos secteam > >FOUND BY Eric Andry eric@wincom.net >*/ *snip*