Local exploit in courier-mta package

2002-01-21 Thread Stefan Hornburg Racke
Package: courier-mta Version: 0.36.1-2 Severity: critical A hand-crafted .courier file can be used to insert \r characters in the message queue file. A bug in the function that reads message queue files subsequently results in memory corruption. This exploit is fixed in 0.37.2 upstream, I'll upl

Local exploit in courier-mta package

2002-01-21 Thread Stefan Hornburg (Racke)
Package: courier-mta Version: 0.36.1-2 Severity: critical A hand-crafted .courier file can be used to insert \r characters in the message queue file. A bug in the function that reads message queue files subsequently results in memory corruption. This exploit is fixed in 0.37.2 upstream, I'll up