Re: Sendmail Weirdness, Or Welcome to WinHat 7.1

[Jason L Tibbitts III]

>>>>> "VGI" == Vladimir G Ivanovic <[EMAIL PROTECTED]> writes:

VGI> "Connect to my machine"? How? You can telnet to port 25, but all you
VGI> can do is talk ESMTP. Is that a security risk?

It may be, if a vulnerability is discovered tomorrow.  If that happens,
then what does Red Hat do?  Get every single person who has installed Red
Hat Linux to upgrade to the fixed package?  Or sleep well knowing that the
default installation is at least protected from nonlocal attacks?  Sure,
sites who turned it back on will have to either shut it off, upgrade to a
fixed package, or be insecure, but at least the problem has been
significantly diminished.

Won't happen?  It's happened before.  (Not just with Sendmail.)

 - J<



_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list