Re: bug in sendmail?

[Suresh Ramasubramanian <sureshr@xxxxxxxxxxxxxx>]

Nick Hill saw fit to inform LI that: 

>/usr/lib/sendmail is suid-root by default on SuSE 6.3... i use it for flushing
>my mail queue... can this be exploited? I'm not looking for an exploit, just
>wondering, and what would be the implications?
>
>nikhilwiz@linux:~ > ls -l /usr/lib/sendmail
>lrwxrwxrwx   1 root     root           18 Apr 24 02:40 /usr/lib/sendmail -> /usr/sbin/sendmail

On my solaris box here

~$ ls -l /usr/lib/sendmail
-r-sr-sr-x   1 root     root     3642964 Aug  4  1999 /usr/lib/sendmail

and

~$ ls -l /usr/sbin/sendmail
/usr/sbin/sendmail: No such file or directory

hth
-s
-- 
Suresh Ramasubramanian + sureshr@xxxxxxxxxxxxxx
I went to the race track once and bet on a horse that was so good that
it took seven others to beat him!