Re: [SECURITY] [DSA 076-1] New most packages available
Aside from the fact that it's a pretty big IF; I'm not aware of too many
mail clients that use pagers. mutt uses vi, pine uses pico, X based MUAs
certainly don't use most.. perhaps mail(x) or something similar use
it, but that's not all too common. Certainly not enough, IMO, to classify
this as a remote exploit.
On Tue, Sep 18, 2001 at 05:01:59PM -0400, Aaron M. Ucko wrote:
> Andres Salomon <firstname.lastname@example.org> writes:
> > How is this a remote exploit?
> If I know somebody uses most as a pager for mail, I can send him or
> her a specially-formatted message which will do various nasty things
> to his or her account.
> Aaron M. Ucko, KB1CJC <email@example.com> (finger firstname.lastname@example.org)
"Any OS is only as good as its admin, and you obviously suck."
-- Ian Gulliver, http://orbz.org/mail/mansunix.txt