Stop Microsoft

Operating Systems => Linux and UNIX => Topic started by: toadlife on 23 March 2006, 10:00

Title: A reminder to all
Post by: toadlife on 23 March 2006, 10:00

Patch your sendmail, if you have it running on any of your linux systems.

http://secunia.com/advisories/19342/

:)

Title: Re: A reminder to all
Post by: Refalm on 23 March 2006, 10:20

I'm glad we're using postfix then :D

Title: Re: A reminder to all
Post by: muzzy on 23 March 2006, 10:53

A hole in sendmail? This is news, who would've thought!

Title: Re: A reminder to all
Post by: mobrien_12 on 23 March 2006, 12:07

Thanks toadlife.  BSD running sendmail affected too, of course.

Postfix really seems the way to go.  Sendmail is good at patching their vulnerabilities, but postfix has less of them in the first place.

Title: Re: A reminder to all
Post by: solemnwarning on 23 March 2006, 15:08

People actually use sendmail? :O

Title: Re: A reminder to all
Post by: WMD on 23 March 2006, 17:24

Quote from: muzzy

A hole in sendmail? This is news, who would've thought!

Yeah, no kidding....

Title: Re: A reminder to all
Post by: H_TeXMeX_H on 23 March 2006, 21:40

What's sendmail ?

Title: Re: A reminder to all
Post by: toadlife on 23 March 2006, 21:44

Quote from: H_TeXMeX_H

What's sendmail ?

One of the most exploited pieces of software in history. I use it on my BSD machines because it's integrated into the OS - which make updating easier.

Of course, if I used postfix, there would be no need to update. :p

Title: Re: A reminder to all
Post by: mobrien_12 on 24 March 2006, 03:41

Quote from: toadlife

One of the most exploited pieces of software in history. I use it on my BSD machines because it's integrated into the OS - which make updating easier.

Of course, if I used postfix, there would be no need to update. :p

Toad, to be honest I can't remember which variant of *BSD you use, but I do know postfix is one of the FreeBSD ports.  Postfix can do everything sendmail can, transparently.  If you want to run it, I'm sure you can.

Me, I updated right away because I couldn't get postfix running on Fedora  Core 4 as you guys may or may not remember.  It probably doesn't matter since the MTA doesn't listen for incoming connections, nor does it send mail to anyone outide the computer (ISP won't allow it), it's firewalled by IPTAbles and my router... but still I always patch.

Title: Re: A reminder to all
Post by: H_TeXMeX_H on 24 March 2006, 04:43

You can't get it running ? what was wrong ?

Title: Re: A reminder to all
Post by: toadlife on 24 March 2006, 11:06

Actually, I *do* run postfix..at work on my OpenBSD spam box. At home on FreeBSd I just use the built in sendmail - pretty much out of sheer laziness.  To update sendmail, I just update the OS, which I update anyway. I really should take a moment a switch all of my BSD boxes to postfix.