Sendmail Address Prescan Memory Corruption

[Karl Balsmeier]

Is there a recommended approach to making sure a running sendmail does not suffer from this specific vuln?

I have followed some excellent adice on hardening the machine using:

Bastille
IDS/9000
Security Patch Check
TCPWrappers
Perl

I am close to having all of these running.

My specific question is if there's a forum speficic to sendmail, or a discussion list.

-karl

[Steven E. Protter · Accepted solution]

Here you go.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xa4369607df6ed711abdc0090277a778c,00.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xe37d7cffe265d711abdc0090277a778c,00.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,,0xcf747cffe265d711abdc0090277a778c,00.html

These will do you fine. You're not there yet, but you are on the road to great security.

SEP

[John Poff]

Hi,

Here is a good place to look:

http://www.sendmail.org/

They list some good resources.

JP