Re: [cobalt-security] Sendmail: If you haven't patched it yet..

[paul jacobs <paul@xxxxxxxxxxxxxxxxxx>]

At 08:45 AM 3/5/2003, you wrote:

> You should be shaking in yer boots! You're gonna get hacked!
>
> http://zdnet.com.com/2100-1105-991041.html
>
> Hackers' code exploits Sendmail flaw
>
> A group of four Polish hackers published code to an open security mailing 
> list on Tuesday that can take advantage of a major vulnerability in the 
> Sendmail mail server.
>
> Sorry; after reading that, I was sure glad I'm patched!
>
> Cheers,
> Glenn

I do believe that you should give a company notice of a security problem 
with there software 1 month before releasing how to access the security 
problem..
Then if it is not fixed by the company they are liable, if fixed by the 
company and, not the user the user should not be a system admin.


> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security

Best Regards,
Paul Jacobs / SR. Network Manager
Microsoft  MCP 2000 / Cisco Certified
Design / Install / Troubleshoot / Optimize /
Security of WANs / LANs / Data Recovery
Mon. - Fri. 9AM - 5PM (619)336-1400
http://www.adv-data.com