Re: Multiply bugs in MH-6.8.3 (Mail Handler program)

Alan Cox (alan@LXORGUK.UKUU.ORG.UK)
Mon, 28 Jul 1997 23:27:48 +0100

> ruserpass(host,&user,&pass); is found in msgchk.c, in checkremote() or
> something like that... meaning that the host aren't vulnerable if not
> configured.. this is from a system where mh was installed w/o being

Also that means ruserpass() from libc isnt being used which is probably
bad as most libc's have this fixed. (The hole above btw is in all the old
BSD derived libc's) but very very few current ones.