Trojan-modified Sendmail floating around - 8.12.6 - Since Sept. 28th or earlier.

Ben Laurie ben at algroup.co.uk
Wed Oct 9 15:01:21 PDT 2002


Bill Stewart wrote:
> Somebody backdoored the source code for Sendmail on the official server.
> So if you recompile from scratch, your sendmail is 0wned.
> Another reason not to run mail systems as root....

In this case, as I understand it, it bites when you compile. So, its 
another reason not to build them as root.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff





More information about the cypherpunks-legacy mailing list