From owner-FreeBSD-users-jp@jp.FreeBSD.org Thu Oct  2 01:30:16 2003
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id h91GUG397058;
	Thu, 2 Oct 2003 01:30:16 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from deneb.buildkernel.org (deneb.buildkernel.org [219.117.195.152])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id h91GUFJ97053
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Thu, 2 Oct 2003 01:30:15 +0900 (JST)
	(envelope-from sakichan@sakichan.org)
Received: from alioth.sakichan.org (alioth.sakichan.org [192.168.1.3])
	by deneb.buildkernel.org (Postfix) with ESMTP
	id 79E6972501; Thu,  2 Oct 2003 01:30:14 +0900 (JST)
Received: from castor.sakichan.org (castor.sakichan.org [192.168.1.4])
	by alioth.sakichan.org (Postfix) with ESMTP
	id 569F6311C; Thu,  2 Oct 2003 01:30:14 +0900 (JST)
Received: from castor.sakichan.org (localhost [127.0.0.1])
	by castor.sakichan.org (Postfix) with ESMTP
	id 300B9229DF; Thu,  2 Oct 2003 01:30:14 +0900 (JST)
Message-ID: <vtry8w4vs2x.wl@castor.sakichan.org>
From: SAKIYAMA Nobuo <sakichan@sakichan.org>
To: FreeBSD-users-jp@jp.FreeBSD.org
Cc: Toshiboumi Ohta <bugbird@timedia.co.jp>
In-Reply-To: <20031002003614.18b9a6ba.bugbird@timedia.co.jp>
References: <20031001224730.900B.ML-FREEBSD-USERS@amago.trout.jp>
	<20031002003614.18b9a6ba.bugbird@timedia.co.jp>
User-Agent: Wanderlust/2.10.0 (Venus) SEMI/1.14.5 (Awara-Onsen) FLIM/1.14.5 (Demachiyanagi) APEL/10.5 Emacs/21.3 (i386--freebsd) MULE/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.5 - "Awara-Onsen")
Content-Type: text/plain; charset=ISO-2022-JP
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Thu, 02 Oct 2003 01:30:14 +0900
X-Sequence: FreeBSD-users-jp 76590
Subject: [FreeBSD-users-jp 76590] Re: NO_SENDMAIL
 =?ISO-2022-JP?B?GyRCJE47WERqGyhC?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: sakichan@sakichan.org
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+030902

At Thu, 2 Oct 2003 00:36:14 +0900,
Toshiboumi Ohta wrote:

> enigma: {101} % which sendmail
> /usr/sbin/sendmail
> enigma: {102} % file /usr/sbin/sendmail
> /usr/sbin/sendmail: symbolic link to /usr/sbin/mailwrapper
> 
> $B!D$H$$$&$3$H$G!"(Bman mailwrapper $B$7$F$_$F$/$@$5$$!#(Bjman $B$K$b(B
> $B$J$C$F$^$9!#(Bports/package $B$r;H$C$F%*%W%7%g%J%k$J(B MTA suite 
> $B$r%$%s%9%H!<%k$7$?$N$G$"$l$P!"$3$3$iJU4V0c$$L5$/E0Dl$5$l$F(B
> $B$$$k$O$:$G$9!#(B
....
>  $B$^$!!"$=$&$$$&$o$1$G!"%"%C%W%G!<%H$5$l$J$$%j%=!<%9$r:n$k$3$H(B
> $B$K$h$C$F!V?.4I$NL5$$GzCF!W$r:n$k$H$$$&$3$H$K$J$k$N$O$4;XE&$N(B
> $BDL$j$G!"(Bports $B$r;H$o$:$K%*%W%7%g%J%k$J(B MTA $B$r%$%s%9%H!<%k$7$?(B
> $B>l9g$J$I$r9M$($l$P!"0U?^$5$l$J$$7A$G%;%-%e%j%F%#@H<e@-$N$"$k(B
>  MTA $B$,JB9T1?MQ$5$l$F$7$^$&2DG=@-$O$?$7$+$K$"$k$H;W$$$^$9!#(B
> 
>  $B2DG=@-$O$"$j$^$9$,!"$^$!!"IaDL$O(B (FreeBSD $BE*:nK!$K=>$C$F$$$k(B
> $B8B$j$K$*$$$F(B) $B$=$3$^$G?4G[$7$J$/$F$bNI$$$N$G$O$J$$$+$H;W$$$^$9!#(B

/usr/libexec/sendmail/sendmail $B$K(B local exploitable $B$J7j$,$"$l$P!"(B($B:G(B
$B0-$N>l9g!K(Blocal $B$J(B user $B$,(B smmsp group $B$N8"8B$rC%$(!"$=$N>l9g$K$d$l$k(B
$B$3$H$OB?$/$J$$$G$9$,(B /var/spool/clientmqueue $B0J2<$G>!<j$J$3$H$,$G$-$k(B
$B$h$&$J5$$,$7$^$9!#(B

$B$3$l$,5vMF$G$-$k!"$J$$$7L5;k$G$-$k4D6-$G$"$l$P?4G[$7$J$/$F$h$$$H$$$&$3(B
$B$H$K$J$j$^$9$,!"5vMF$G$-$J$$!"$"$k$$$OL5;k$G$-$J$$%]%j%7!<$N$b$H$G$N1?(B
$BMQ$G$7$?$i!"BP=h$7$J$-$c$^$:$$$G$7$g$&!J$G!"$I$A$i$N>l9g$+$H$$$&$3$H$O(B
$B85%a!<%k$+$i$@$1$G$OH=CG$G$-$^$;$s!K!#(B
-- 
SAKIYAMA Nobuo ($B:j;3(B $B?-IW(B)  sakichan@sakichan.org
