full-disclosure - sendmail vunerability?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: malazaba at o2.pl (nag)
Subject: sendmail vunerability?

there is some rumor spreading about new sendmail vulnerability. i do not see
any news at www.sendmail.org but supposedly ths is remote buffer overflow.
i received the patch (see below), but o not have any exploit, so please
don't mail me about it.

does this look legitimate? any comments? is this something old? is
this some scam backdoor?

--- parseaddr.c 18 Jan 2003 00:41:48 -0000      8.359.2.4
+++ parseaddr.c 20 Mar 2003 12:20:43 -0000

@@ -709,7 +710,7 @@
                        }

                        /* read a new input character */
-                       c = *p++;
+                       c = (unsigned char)(*p++);
                        if (c == '\0')
                        {
                                /* diagnose and patch up bad syntax */

-----------
--- nag ---
-----------