Subject: EMERGENCY: new remote root exploit in UW imapd

From: Timothy J Luoma <[email-masked]>
Date: Thu, 16 Jul 1998 19:58:58 -0400

Hey folks, I haven't seen this on the list and thought it would be of  
interest here:

Rather than forwarding the entire article, I'll point to the URL from BugTraq

http://www.NETSPACE.ORG/cgi-bin/wa?A2=ind9807c&L=bugtraq&O=T&P=2045

TjL

-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------

---

From: David Dyck <[email-masked]>
Date: Thu, 16 Jul 1998 21:14:55 -0700

the following message doesn't pass the url directly to exec,
 or quote the argument.

my guess is it gets passed directly to system.

there is room for improvement in this area, as I couldn't even
pass a simple argument ('-n') to the program I wanted to invoke
either.

I'd suggest if pine is going to check that the program exists,
and it knows it wasj just passed the url, that it 
  fork and exec with the args already parsed (like perl's
     system "prog", "arg1", "arg2"; #....

On Thu, 16 Jul 1998, Timothy J Luoma wrote:

> Date: Thu, 16 Jul 1998 16:58:58 -0700
> From: Timothy J Luoma <[email-masked]>
> To: Pine Discussion Forum <[email-masked]>
> Subject: EMERGENCY: new remote root exploit in UW imapd
> 
> 
>