*BSD News Article 95945


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!uunet!in1.uu.net!207.22.81.9!europa.clark.net!feed1.news.erols.com!howland.erols.net!newshub2.home.com!newshub1.home.com!news.home.com!nick.arc.nasa.gov!purdue!oitnews.harvard.edu!fas-news.harvard.edu!digitas.harvard.edu!ken
From: ken@digitas.harvard.edu (Ken Shan)
Newsgroups: comp.unix.bsd.bsdi.misc
Subject: metamail security hole?
Date: 22 May 1997 13:36:51 GMT
Organization: Digitas
Lines: 10
Message-ID: <5m1i5j$6ad$1@news.fas.harvard.edu>
NNTP-Posting-Host: digitas.harvard.edu
X-Newsreader: TIN [version 1.2 PL2]
Xref: euryale.cc.adfa.oz.au comp.unix.bsd.bsdi.misc:6901

With respect to the recent CERT advisory on metamail script
insecurity (CA-97.14.metamail), is BSDI (2.1) vulnerable and/or
planning to put out a patch?  It's strange since BSDI is not listed in
Appendix A as usual, yet the CERT coordination center thanks BSDI (and
FreeBSD) for their input on the solution...

--
Edit this signature at http://www.digitas.harvard.edu/cgi-bin/ken/sig
O I I A U
                   a sentence composed of only vowels