Re: [cobalt-users] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution

["Al-Juhani" <aljuhani@xxxxxxxxx>]

Dan.

It is true, here is the URL:

http://online.securityfocus.com/archive/1/294452

You can use the following MD5 checksums to verify the integrity of your Sendmail source code distribution:
Correct versions:

73e18ea78b2386b774963c8472cbd309 sendmail.8.12.6.tar.gz
cebe3fa43731b315908f44889d9d2137 sendmail.8.12.6.tar.Z
8b9c78122044f4e4744fc447eeafef34 sendmail.8.12.6.tar.sig

Regards,

Al-Juhani
aljuhani@xxxxxxxxx

----- Original Message ----- 
From: "Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Wednesday, October 09, 2002 05:00
Subject: RE: [cobalt-users] CERT Advisory CA-2002-28 Trojan Horse Sendmail Distribution


> > This is an FYI message. There has been talk on various lists 
> > on whether or 
> > not it is appropriate to post CERT Advisories ... but the 
> > last time I did 
> > it opened up 2 wks of threads on SSL so I'm taking a risk at 
> > passing on 
> > this one. As a novice, I ask the *experts* to help advise of 
> > neophytes of 
> > the possibilities of our RAQ servers using this and if we 
> > need to worry 
> > about this, or just kill the thread.
> > 
> 
> If you know it affects the RaQ, fine. Otherwise why not just post the
> URL instead of filling the digest with what may be a useless warning?
> Some people read the digest version, (which is why top posting is so bad
> on the list).
> -- 
> Dan Kriwitsky
> 
> Please reply to the list only. Offlist replies are not read.