SITE SECURITY ISSUES

Click to see the XML version of this web page. rss 2.0

updated: 3/3/03; 2:46:40 PM.


New Tutorial: Outline Inclusion

activeRenderer Now Renders Multimedia Inclusions

>

Monday, March 3, 2003
> Sendmail Security Alert

Received another security notice from RedHat this afternoon:

During a code audit of Sendmail by ISS, a critical vulnerability was uncovered that affects unpatched versions of Sendmail prior to version 8.12.8. A remote attacker can send a carefully crafted email message which, when processed by sendmail, causes arbitrary code to be executed as root.

We are advised that a proof-of-concept exploit is known to exist, but is not believed to be in the wild.

Since this is a message-based vulnerability, MTAs other than Sendmail may pass on the carefully crafted message. This means that unpatched versions of Sendmail inside a network could still be at risk even if they do not accept external connections directly.

In addition, the restricted shell (SMRSH) in Sendmail allows attackers to bypass the intended restrictions of smrsh by inserting additional commands after "||" sequences or "/" characters, which are not properly filtered or verified. A sucessful attack would allow an attacker who has a local account on a system which has explicitly enabled smrsh to execute arbitrary binaries as themselves by utilizing their .forward file.

Wow, that's one of the best looking security holes I've heard of in quite a while :-) Update time...

>

Friday, October 4, 2002
> Vulnerability In Redhat's glibc
> Securing Linux: Why It's Worthwhile and Achievable
>

Wednesday, September 25, 2002
> A Visit To Amanda
>

Friday, September 6, 2002
> Site Logging And Monitoring
>

Saturday, August 3, 2002
> Apple releases Security Update 2002-08-02.
>

Friday, June 28, 2002
> Apache mod_ssl and openSSH Update For MacOS X
>

Thursday, June 13, 2002
> So Long, And Thanks For All The Passwords
> Honeypots and Honeynets
> Mail Sending Mistakes

Latest
03   04   25   06   03   28   13   
expand / collapse all posts
how this works

March 2003
Sun Mon Tue Wed Thu Fri Sat
            1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30 31          
Oct   Apr

© copyright 2003
by Marc Barrot