[comp.sys.sgi] WARNING - Security hole in IRIX 3.3 /usr/sbin/Mail

root (Superuser) (10/12/90)

--- WARNING ---

There is a security hole in IRIX 3.3 and 3.3.1 /usr/sbin/Mail.
Due to the nature of this problem, I shall provide no further details.

For the benefit of those with immediate security concerns, a fixed
/usr/sbin/Mail binary has been made available for anonymous ftp from
SGI.COM ([192.48.153.1]).  The fixed binary can be found at:

	sgi/Mail/Mail

under the ftp directory.

Note that this binary must be installed with the same group (mail) and
permissions (2755) as your existing 3.3 or 3.3.1 /usr/sbin/Mail.

Apologies for any inconvenience.

	Robert Stephens
	Silicon Graphics Inc.
	Mountain View, CA

	roberts@sgi.com