[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison.



On Wed, 11 May 2005 13:20:52 -0500 (CDT), James Longstreet <jlongs2@xxxxxxx> 
said:

> Has anyone ever wondered why SCO's mails come from
> please_reply_to_security@xxxxxxx?  Why not just make them come from
> security@xxxxxxx?  Or at least set the Reply-To: field?

> Other than preventing spam, is there a greater purpose here that I'm
> missing?  

To keep their in-box clear of out-of-office replies from clueless lusers
who don't know how to configure a vacation program?

Google for <site:lists.grok.org.uk "out-of-office">

And just over a week ago:
http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033717.html

(He says, preparing to see how many idiot's mailers auto-reply to
this: To anyone that does - you are doubly incompetent, once for your
ineptness in running your e-mail software in the first place, and once
for telling a security mailing list that your are away from your
post).

-- 
Alan J. Wylie                                          http://www.wylie.me.uk/
"Perfection [in design] is achieved not when there is nothing left to add,
but rather when there is nothing left to take away."
  -- Antoine de Saint-Exupery
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/