Sendmail exploit

Nate Williams nate at yogotech.com
Mon Mar 31 10:16:15 PST 2003


> The CERT advisory on the new Sendmail exploit seems to be saying that 
> Sendmail machines behind a firewall can still be exploited.

If I understand things correctly, if you allow your machine to connect
to outside boxes through the firewall, then it can be exploited, since
it will initiate connections to external boxes that can use the
connection to do bad things to your box.



Nate


More information about the freebsd-isp mailing list