Great Circle Associates Majordomo-Users
(March 1995)

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: valid_addr check in new-list and request-answer missing
From: "John P. Rouillard" <rouilj @ cs . umb . edu>
Date: Tue, 14 Mar 1995 15:08:32 -0500
To: peter @ i3 . informatik . rwth-aachen . de (Peter Heimann)
Cc: majordomo-users @ greatcircle . com
In-reply-to: Your message of "Tue, 14 Mar 1995 16:05:55 +0100." <>

In message <>,
Peter Heimann writes:
>Security patch for Majordomo version 1.93

Good point, I will make sure the patch is applied to 1.94.  However, I
haven't seen a sendmail that allows To: addresses of the form:

	| program

I usually get a message like:

	Cannot mail directly to programs
	Cannot mail directly to files

A simple test is:

== start file
To: | /bin/cat, /tmp/file
From: root
Subject: A test

== end file

then do a:

	sendmail -t < foo

On my system this results in:

  /tmp/file... Cannot mail directly to files
  | /bin/cat... Cannot mail directly to programs

hopefully it should work the same for all sendmail varients.

>While majordomo itself is careful about checking a supplied 'from'
>address for the characters '/' and '|', the call to '&valid_addr'
>is missing in new-list and request-answer. This can make it possible
>for a malicious user to run programs or write to files.

This is needed because files and programs are valid addresses if they
are read in from an include'd file.

				-- John
John Rouillard

Senior Systems Administrator		  IDD Information Services			  Waltham, MA (617) 890-7227 x337
						      (617) 487-3937 (Direct)
Senior Systems Consultant (SERL Project)  University of Massachusetts at Boston (preferred)	          Boston, MA, (617) 287-6480
My employers don't acknowledge my existence much less my opinions.

Indexed By Date Previous: Error in majordomo
From: (Edward Brown)
Next: Truncated subscriber lists!
From: Thomas Leavitt <>
Indexed By Thread Previous: valid_addr check in new-list and request-answer missing
From: (Peter Heimann)
Next: (perms)
From: zeek <>

Search Internet Search