|
|
Family: Mandrake Local Security Checks --> Category: infos
MDKSA-2002:083: sendmail Vulnerability Scan
Vulnerability Scan Summary
Check for the version of the sendmail package
Detailed Explanation for this Vulnerability Test
The remote host is missing the patch for the advisory MDKSA-2002:083 (sendmail).
A vulnerability was discovered by zen-parse and Pedram Amini in the sendmail
MTA. They found two ways to exploit smrsh, an application intended as a
replacement for the sh shell for use with sendmail
the first by inserting
specially formatted commands in the ~/.forward file and secondly by calling
smrsh directly with special options. These can be exploited to give users with
no shell account, or those not permitted to execute certain programs or
commands, the ability to bypass these restrictions.
Solution : http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2002:083
Threat Level: High
Click HERE for more information and discussions on this network vulnerability scan.
|
