Path: utzoo!attcan!uunet!husc6!mailrus!tut.cis.ohio-state.edu!triceratops.cis.ohio-state.edu!karl
From: karl@triceratops.cis.ohio-state.edu (Karl Kleinpaste)
Newsgroups: comp.sys.pyramid
Subject: Re: Pyramid's sendmail
Message-ID: <27272@tut.cis.ohio-state.edu>
Date: 11 Nov 88 16:21:28 GMT
References: <424@merkin.cactus.org>
Sender: news@tut.cis.ohio-state.edu
Lines: 16
In-reply-to: hack@merkin.cactus.org's message of 11 Nov 88 03:41:57 GMT

Try
	telnet 127.1 smtp
	[ready message from sendmail in SMTP]
	debug
and if it responds with
	200 Debug set
then your sendmail is subject to abuse.  The particular worm which
made the rounds was peculiar to VAXen and Sun3s, because it was
carrying around precompiled binaries for those 2 CPUs; but the general
problem of invoking debug mode remotely and then delivering to a piped
destination exists nonetheless.

csg@pyramid announced in the phage mailing list (discussing the worm,
its abortion, its consequences) that there exists a PTF to sendmail.

--Karl