topic Re: verify sendmail fix? in Operating System - HP-UX

verify sendmail fix?

EML — Thu, 06 Mar 2003 10:27:03 GMT

Does anyone know how to simulate this security flaw in sendmail?
I'd like to verify the fix from HP if it is working ok.

Re: verify sendmail fix?

Berlene Herren — Thu, 06 Mar 2003 12:02:41 GMT

#what /usr/sbin/sendmail

Copyright (c) 1998 HEWLETT PACKARD COMPANY and its licensors, ncluding Sendmail, Inc., and the Regents of the University of California. All rights reserved. version.c 8.9.3.1 (Berkeley) 18/09/2001 (PHNE_25183+JAGae58098)
^^^
Look for the JAG

Berlene

Re: verify sendmail fix?

Robin Wakefield — Thu, 06 Mar 2003 15:23:31 GMT

Hi,

Doesn't answer your question, but an interesting link:

http://www.silicon.com/news/500013-500001/1/3157.html?nl=d20030306

rgds, Robin

Re: verify sendmail fix?

someone_4 — Thu, 06 Mar 2003 16:11:40 GMT

Hello

According to sendmail:
To check whether the new sendmail binary contains the patch, run this command (in the directory where the binary is located):

strings sendmail | grep 'Dropped invalid comments from header address'

The command must print the string
Dropped invalid comments from header address

##################
Here is my output:

strings /usr/sbin/sendmail | grep -i dropped

If it is patchted up it will return:
Dropped invalid comments from header address

if it is not patched up it will not return anything..

Richard

Re: verify sendmail fix?

Kasper Haitsma — Mon, 17 Mar 2003 09:31:51 GMT

when performing a check on the binairy with strings(1), make sure to include the -a option. In some binaries, the string "Dropped invalid comments from header address" will otherwise not be shown (8.11.1 for 11i is known for this)