The following seems legit. CERT advisory 94:11 seems to be what the
article refers to. Given the source of Majordomo, I guess it's fair
to ask what the exposure comes down to in this forum. Is this just YASH
(Yet Another Sendmail Hole), or is there something in the world that
contributes security problems besides sendmail and rsh?
Ross Patterson
Sterling Software, Inc.
----- Forwarded message begins here -----
From: E-D-U-P-A-G-E < info @
ivory .
educom .
edu>
Wed, 22 Jun 1994 02:08:27 -0400
To: Multiple recipients of list <edupage @
ivory .
educom .
edu>
Subject: E-d-u-p-a-g-e 06/21/94
************************************************************************
Edupage, a summary of news items on information technology, is provided
three times each week as a service by Educom -- a consortium of leading
colleges and universities seeking to transform education through the use of
information technology.
************************************************************************
TOP STORIES
Computer Threat Shuts Down Mail Lists
...
COMPUTER THREAT SHUTS DOWN MAIL LISTS
Many Internet mailing lists that use Majordomo software were shut
down for a few days this month following an alert issued by the Computer
Emergency Response Team. CERT recommends replacing the 1.91 version of
Majordomo with 1.92, which is available at: ftp.greatcircle.com. Then go to
the directory/pub/majordomo and retrieve a file called majordomo1.92.tar.z.
(Chronicle of Higher Education 6/22/94 A21)
..
************************************************************************
Edupage. To add your name to the Edupage distribution list, send e-mail to:
listproc @
educom .
edu .
In the body of the message type: sub edupage <your
name>. To unsubscribe send the message: unsub edupage. Edupage is also
available in Portuguese and Spanish: edunews @
nc-rj .
rnp .
br .
************************************************************************
Educom -- Transforming Education Through Information Technology
************************************************************************
------ Forwarded message ends here ------
|
|
