sendmail-aliasesDoS.patch

   1
   2 The sendmail 8.9.3 patch:
   3
   4 --- sendmail/sendmail/main.c~orig       Sat Jan  9 15:31:13 1999
   5 +++ sendmail/sendmail/main.c    Wed Nov 17 19:04:44 1999
   6 @@ -984,6 +984,18 @@
   7                 usrerr("Permission denied");
   8                 finis(FALSE, EX_USAGE);
   9         }
  10 +       if (OpMode == MD_INITALIAS &&
  11 +           RealUid != 0 &&
  12 +           RealUid != TrustedUid &&
  13 +           !wordinclass(RealUserName, 't'))
  14 +       {
  15 +               if (LogLevel > 1)
  16 +                       sm_syslog(LOG_ALERT, NOQID,
  17 +                                 "user %d attempted to rebuild the alias map",
  18 +                                 RealUid);
  19 +               usrerr("Permission denied");
  20 +               finis(FALSE, EX_USAGE);
  21 +       }
  22
  23         if (MeToo)
  24                 BlankEnvelope.e_flags |= EF_METOO;
  25