diff options
| author | glass <glass@NetBSD.org> | 1993-06-28 22:32:43 +0000 |
|---|---|---|
| committer | glass <glass@NetBSD.org> | 1993-06-28 22:32:43 +0000 |
| commit | b54cac1cc7727bf0d275cf521cc23000f0dfd12e (patch) | |
| tree | b4a3ed27e6c736f4b3c52c25e1b9eee085224daa /usr.sbin/sendmail/src/parseaddr.c | |
| parent | 455487b127ac978ac49a7b57591e5bf7de91a5d6 (diff) | |
Upgrade for sendmail 8.1B to 8.1C....
from Eric Allman <eric@vangogh.cs.berkeley.edu>:
>Subject: sendmail 8.1C out
...
>THIS IS AN URGENT FIX. There is a security problem in 8.1B (and
>apparently most vendor versions of sendmail) that permits a user
>to read any file on the system (don't ask, I won't go into details).
>It should be installed immediately.
...
> ======================================================================
>
> 8.1C/8.1B 93/06/27
> Serious security bug fix: it was possible to read any file on
> the system, regardless of ownership and permissions.
> If a subroutine returns a fully qualified address, return it
> immediately instead of feeding it back into rewriting.
> This fixes a problem with mailertable lookups.
> CONFIG: fix some M4 frotz (concat => CONCAT)
>
Diffstat (limited to 'usr.sbin/sendmail/src/parseaddr.c')
| -rw-r--r-- | usr.sbin/sendmail/src/parseaddr.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/usr.sbin/sendmail/src/parseaddr.c b/usr.sbin/sendmail/src/parseaddr.c index 496e29990e2..3e4beb540c5 100644 --- a/usr.sbin/sendmail/src/parseaddr.c +++ b/usr.sbin/sendmail/src/parseaddr.c @@ -33,7 +33,7 @@ */ #ifndef lint -static char sccsid[] = "@(#)parseaddr.c 8.1 (Berkeley) 6/12/93"; +static char sccsid[] = "@(#)parseaddr.c 8.1 (Berkeley) 6/27/93"; #endif /* not lint */ # include "sendmail.h" @@ -1143,6 +1143,8 @@ rewrite(pvp, ruleset, e) stat = rewrite(pvp, atoi(npvp[1]), e); if (rstat == EX_OK || stat == EX_TEMPFAIL) rstat = stat; + if ((**pvp & 0377) == CANONNET) + rwr = NULL; } else { |
