Subject: Re: Sendmail 8.6.10 problem

From: [email-masked] (Barry Bouwsma)
Date: 7 Apr 1995 01:44:28 GMT

In a previous article, [email-masked] (Jeff Squyres) says:

>I am running SunOS 4.1.3 on a Sparc 10 with sendmail 8.6.10.  [...]
>
>kanga sendmail[1635]: POSSIBLE ATTACK from username@localhost: newline in string
>
>I realize that newlines in strings were security problems before sendmail
>8.6.10 but has now been apparently fixed, and this is why sendmail
>is giving me this message, but why does the latest version of pine still
>submit messages incorrectly this way?  Is there a patch?

    This is a bug in BSD Sendmail v8.6.10.  You should upgrade to sendmail
8.6.12, which no longer has this problem.  Pine is not submitting the
messages incorrectly.

-- 
 Barry Bouwsma, will crash computers for chocolate and dental care
    Please direct mail to  <[email-masked]> (MIME-aware)
LOAD "SENDMAIL",8,1
                            driving a 300 baud Trabant on the Datenautobahn

---

From: [email-masked] (Jeff Squyres)
Date: 6 Apr 1995 23:03:34 GMT

I am running SunOS 4.1.3 on a Sparc 10 with sendmail 8.6.10.  When pine 
replies to all recipients (and this list of recipients is rather long),
I get the following message on my console:

kanga sendmail[1635]: POSSIBLE ATTACK from username@localhost: newline in string
"[email-masked], [email-masked], [email-masked], [email-masked], 
[email-masked],      [email-masked], ....... " etc.

{+} Jeff Squyres
{+} [email-masked]
{+} Perpetual Obsessive Notre Dame Student Craving Utter Madness.  
{+} (5 years and counting -- 2 more years of eligibility)