US-CERT Technical Cyber Security Alert TA06-081A -- Sendmail Race Condition Vulnerability (fwd)

Wed Mar 22 23:37:16 UTC 2006

On 3/22/06, Kenneth Porter <shiva at sewingwitch.com> wrote:

> Main alert page: <http://www.kb.cert.org/vuls/id/834865>
>
> Fedora details: <http://www.kb.cert.org/vuls/id/MIMG-6MPU9N>
>
> >From the summary:
>
>    A race condition in Sendmail may allow a remote attacker to execute
>    arbitrary code.
>
> For those of us accepting mail from outside on pre-FC4 Fedora, are any
> updates in the pipe to address this?
>

The patches are being looked at and evaluated.

> --
> fedora-legacy-list mailing list
> fedora-legacy-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-legacy-list
>

--
Stephen J Smoogen.
CSIRT/Linux System Administrator