WARNING - Security hole in IRIX 3.3 /usr/sbin/Mail

Superuser root
Fri Oct 12 05:37:35 AEST 1990


--- WARNING ---

There is a security hole in IRIX 3.3 and 3.3.1 /usr/sbin/Mail.
Due to the nature of this problem, I shall provide no further details.

For the benefit of those with immediate security concerns, a fixed
/usr/sbin/Mail binary has been made available for anonymous ftp from
SGI.COM ([192.48.153.1]).  The fixed binary can be found at:

	sgi/Mail/Mail

under the ftp directory.

Note that this binary must be installed with the same group (mail) and
permissions (2755) as your existing 3.3 or 3.3.1 /usr/sbin/Mail.

Apologies for any inconvenience.

	Robert Stephens
	Silicon Graphics Inc.
	Mountain View, CA

	roberts at sgi.com



More information about the Comp.sys.sgi mailing list