[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sentry
Subject:    Re: [Abacus] Possible newline ATTACK
From:       Micah Anderson <micah () riseup ! net>
Date:       2001-10-26 5:09:20
[Download RAW message or body]

Actually, it isn't... I am running the latest version of sendmail. The
one they reference in this newsgroup is really old (8.6), and I'm
running 8.12.1 which supposedly has this fixed. I think it is a
problem in the webmail program I am using, but I think it is going to
be easier to disable this check in logcheck...?

Micah


On Fri, 26 Oct 2001, Noah Schweitzer wrote:

> It's a problem with sendmail.  Upgrading supposedly fixes it.
> 
> http://groups.google.com/groups?hl=en&threadm=3nk7do%2495i%40decaxp.harvard.
> edu&rnum=2&prev=/groups%3Fq%3Dnewline%2Bin%2Bstring%2Bsendmail%26hl%3Den%26r
> num%3D2%26selm%3D3nk7do%252495i%2540decaxp.harvard.edu
> 
> -----Original Message-----
> From: Micah Anderson [mailto:micah@riseup.net]
> Sent: Thursday, October 25, 2001 11:34 PM
> To: abacus@ragweed.psionic.com
> Subject: [Abacus] Possible newline ATTACK
> 
> 
> 
> 
> For some reason I am getting a bunch of these, which is getting
> annoying:
> 
> Oct 18 08:33:13 riseup sendmail[20068]: f9IFXDb20068: POSSIBLE ATTACK
> from [UNKNOWN]: newline in string "someonesemail@hotmail.com^M "
> 
> I deem these as genuine, but want them to go away, I think it has to
> do with my webmail server I am running and I don't want logcheck to
> choke on them, any ideas how I can stop this check?
> 
> Thanks!
> Micah

[prev in list] [next in list] [prev in thread] [next in thread]