Critical flaw exposes Internet e-mail

Jewels · 03-03-2003, 11:46 PM

March 3 ¡ª A newly discovered flaw in a critical piece of Internet infrastructure software could put more than half the Internet¡¯s e-mail servers at risk, researchers say. The flaw exists in Sendmail, a program that sorts and delivers most e-mail. A single message sent at a flawed e-mail server could allow an attacker to take control of the server, read its contents and use it to organize a massive denial of service attack. But officials are hopeful that a month¡¯s work of secret efforts to shore up defenses against the flaw ¡ª which included informing top federal offices and foreign governments ¡ª will minimize its impact.

to read on http://msnbc.com/news/880094.asp?cp1=1#BODY

GameMaster · 03-04-2003, 12:23 AM

Their is nothing funny about this Jewels. I'll see to it you're tar-and-feathered for laughing.

Jonbo298 · 03-04-2003, 12:36 AM

I see it as partly funny because people find these huge flaws and expose them, then a company(ies) try to deny they had a flaw or say its not their problem and blame another company. But meh, I don't any e-mails that I wouldnt want to be seen by other people other then the sender very often.

Dyne · 03-04-2003, 01:30 AM

Hotmail anyone?

Professor S · 03-04-2003, 08:38 AM

What I find funny is that a news organization would be so unethical as to release this information before the problem is fixed.

E-Mail is used more for business than any other reason. If these universal flaws are pointed out for all to see, whats to keep some zit faced geek whos pissed off because chicks don't like him from causing some major havok?

The Duggler · 03-04-2003, 09:06 AM

It only affect "Sendmail" that runs mainly on Unix/Linux system. It shouldn't affect most of us.

sdtPikachu · 03-04-2003, 03:05 PM

Quote:

Originally posted by Ranzid
It only affect "Sendmail" that runs mainly on Unix/Linux system. It shouldn't affect most of us.

Sorry to sound offensive, but that's retarded.

About 60% of the internet runs off UNIX-based servers, including a great many of ISP's SMTP servers - including possibly yours. It's a big and potentially dangerous vulnerability. Just because you're not using a potentially dangerous piece of software doesn't mean you can't fall victim to it's shortcomings.

Quote:

Originally posted by The Strangler
What I find funny is that a news organization would be so unethical as to release this information before the problem is fixed.

Quite an insightful post.

Others may disagree with me, but Sendmail is one of the primo facto UNIX apps which keeps your email running.

MSNBC is owned by Microsoft.

Do the maths.

I won't even mention my snorts of hypocrisy when MS mouths off at some "unethical" news source who tell the public about a critical MS vuln six months after the details have been reported trying to get MS to do something about it.

The Duggler · 03-04-2003, 03:27 PM

You are right stdpikachu, but calling me a retard is a bit much don't you think? We are not all nerds here.

What I meant was that we, the normal users shouldn't have to worry, because we don't have to do anything, or our systems won't be affected by it, yes some might not have email for a few days but that's it.

But your last part was interesting, I didn't think of that.

Jewels · 03-05-2003, 12:43 AM

Quote:

Originally posted by GameMaster
Their is nothing funny about this Jewels. I'll see to it you're tar-and-feathered for laughing.

I WASNT LAUGHING! i thought that was the face a discussion topic!!!!!!
ill tar and feather you first (runs after gamemaster with tar and a chicken)

sdtPikachu · 03-11-2003, 10:13 AM

Quote:

Originally posted by Ranzid
calling me a retard is a bit much don't you think? We are not all nerds here.

Sorry... I was still in BOFH mode

Since I live in a world populated etirely with computers and (l)users, coming out of it once in a while is a bit of a culture shock...

/me waves goodbye to my life again