full-disclosure - OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed May 11 21:26:36 2005
From: shyyqvfpybfher at wylie.me.uk (shyyqvfpybfher@...ie.me.uk)
Subject: OpenServer 5.0.6 OpenServer 5.0.7 : chroot A
	known exploit can break a chroot prison.

On Wed, 11 May 2005 13:20:52 -0500 (CDT), James Longstreet <jlongs2@....edu> said:

> Has anyone ever wondered why SCO's mails come from
> please_reply_to_security@....com?  Why not just make them come from
> security@....com?  Or at least set the Reply-To: field?

> Other than preventing spam, is there a greater purpose here that I'm
> missing?  

To keep their in-box clear of out-of-office replies from clueless lusers
who don't know how to configure a vacation program?

Google for <site:lists.grok.org.uk "out-of-office">

And just over a week ago:
http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033717.html

(He says, preparing to see how many idiot's mailers auto-reply to
this: To anyone that does - you are doubly incompetent, once for your
ineptness in running your e-mail software in the first place, and once
for telling a security mailing list that your are away from your
post).

-- 
Alan J. Wylie                                          http://www.wylie.me.uk/
"Perfection [in design] is achieved not when there is nothing left to add,
but rather when there is nothing left to take away."
  -- Antoine de Saint-Exupery