RE: Internet VIRUS alert


Keith Bostic (bostic%okeeffe.Berkeley.EDU@ucbvax.Berkeley.EDU)
Sat, 5 Nov 88 15:45:24 PST


> I guess I am not that familiar with the Unix mail systems
> of the Sun and Vax. Is this sendmail?

Yes.

> Does sendmail have the ability
> of receiving mail for a process? If so, this is the biggest security
> hole I have heard about in a long time.

The problem is the implementation, not the concept. Receiving mail
for a process is extremely useful. Three examples, first, a daemon
program that automatically files bug reports. Two, a program that
replies that you've gotten the mail, but aren't reading it because
you're on vacation. Three, a program that takes mail and gateways
it to network news groups.

--keith



This archive was generated by hypermail 2.0b3 on Thu Mar 09 2000 - 14:43:58 GMT