Is PMDFs sendmail affected by the recent CERT Advisory (CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail)?
PMDF is not vulnerable. It doesn’t use a single line of code from the actual sendmail program. The PMDF sendmail replacement is just that – a command-line replacement for the sendmail program. It’s provided with PMDF because quite a few UNIX utilities depend on being able to call a program named “sendmail” with sendmail-style options. The PMDF sendmail replacement is not accessible remotely, and just places any message handed to it by a local program into the PMDF queues.
Related Questions
- Are either MultiNet or TCPware affected by CERT Advisory CA-2002-03 in many implementations of the SNMP Protocol, dated February 12, 2002?
- Is PMDFs sendmail affected by the recent CERT Advisory (CERT Advisory CA-2003-07 Remote Buffer Overflow in Sendmail)?
- How have recent terrorist acts affected the Pre-Employment industry?
