Great Circle Associates List-Managers
(August 2003)

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: heads up about recent spammer & demime bug
From: Nick Simicich <njs @ scifi . squawk . com>
Date: Mon, 11 Aug 2003 16:40:58 -0400
To: List Managers List <list-managers @ greatcircle . com>
In-reply-to: <9959 . 1060573758 @ kanga . nu>
References: <Message from "Michael C. Berch" <mcb @ postmodern . com> <3F949778-CBA7-11D7-968B-003065F94B0A @ postmodern . com> <3F949778-CBA7-11D7-968B-003065F94B0A @ postmodern . com>

At 11:49 PM 2003-08-10 -0400, J C Lawrence wrote:

On Sunday, August 10, 2003, at 10:14 AM, Jeff Wasilko wrote:

> If you're using demime to front-end majordomo, you should patch it to
> deal with a problem that was recently discovered.

This problem is not unique to majordomo hosted lists.

Yep. There is now a release of demime that incorporates the patch - the download site is here:

If you are not running 1.1d, you are vulnerable to this. I found it the same way that I suspect everyone else did, and immediately realized, to my shame, that it was going to be a widespread problem, so I stayed up until I developed a patch and published it on the demime-l list. (I had to sync/reboot my system with sysrq - I could not get in with ctrl-alt-del - it announced that it would start shutting down things, and I waited, but a half hour later it had not yet killed any of the processes that were hanging things up, so I synched and remounted read only, then booted.) I realize that I should have published it here as well, the only reason I did not was because I was too tired to think by the time I finished figuring out the problem myself.

If you are running an older version, or have a locally patched version you want to fix, the patch that was previously posted is good.

He said: "There are people from Baath here reporting everything that
goes on. There are cameras here recording our faces. If the Americans
were to withdraw and everything were to return to the way it was before,
we want to make sure that we survive the massacre that would follow
as Baath go house to house killing anyone who voiced opposition to
Saddam. In public, we always pledge our allegiance to Saddam, but in
our hearts we feel something else."
Nick Simicich - njs @
scifi .
squawk .
Indexed By Date Previous: Re: Looking for majordomo-friendly ISP
From: "Richard B. Emerson" <pavilion @ pinefields . com>
Next: Web-based management & discussion
From: "Anthony J. Albert" <albert @ polaris . umpi . maine . edu>
Indexed By Thread Previous: Re: heads up about recent spammer & demime bug
From: J C Lawrence <claw @ kanga . nu>
Next: Looking for majordomo-friendly ISP
From: "Richard B. Emerson" <pavilion @ pinefields . com>

Search Internet Search