Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!linus!philabs!cmcl2!seismo!lll-crg!lll-lcc!ucdavis!deneb!ccrdave
From: ccrdave@ucdavis.UUCP (Lord Kahless @ Imperial Propoganda)
Newsgroups: net.decus
Subject: Re: (copy) Where is my software support?
Message-ID: <214@ucdavis.UUCP>
Date: Mon, 3-Mar-86 00:58:10 EST
Article-I.D.: ucdavis.214
Posted: Mon Mar  3 00:58:10 1986
Date-Received: Tue, 4-Mar-86 04:13:15 EST
References: <208@gvax.cs.cornell.edu>
Organization: University of California, Davis
Lines: 28

> Dear DEC,
> 
> The sendmail program as distributed with V1.1 of Ultrix came with the
> ever popular bug that I'd rather not discuss except to say that I
> don't like just anyone su'ing to root on *my* systems... What I want
> to flame about is why this bug was not caught before distribution and
> why customers in the field have not been informed of the bug.
> 
> 
> George Boyce, Cornell Computer Services
> G16 Uris Hall
> Cornell University
> Ithaca NY, 14853

As soon as some students got access to the sendmail sources, they
found the trick.  (This is on 4.2 BSD, but one doesn't expect DEC
quality from Berkeley)  DEC should be able to figure out the bug
as fast as some of our hackers.  If not, maybe they should hire
them.

			{dual,lll-crg,ucbvax}!ucdavis!vega!ccrdave
	+-----------------------------------------------------------+
	| 	     "I've seen things you people wouldn't believe. |
	| Attack ships on fire off the shoulder of Orion. I watched |
	| C-Beams glitter in the dark near the Tannhauser Gate. All |
	| those moments will be lost in time, like tears in rain.   |
	| Time to die."  -- Roy Baty, Nexus6, N6MAA10816, Combat    |
	+-----------------------------------------------------------+