The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Sendmail ALERT!!!!

Discussion in 'E-mail Discussions' started by vishal, Apr 8, 2003.

  1. vishal

    vishal Well-Known Member

    Joined:
    Jan 28, 2003
    Messages:
    340
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    Hello All,

    I have sendmail-devel-8.11.6-25.73, sendmail-cf-8.11.6-25.73 on my server.

    CAN-2002-1337 (under review)
    Description Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

    This will allow unauthorized users to get root access.

    And here is what sendmail.org says.

    ***************************************************
    Sendmail 8.12.9 is available; it contains a fix for a critical security problem discovered by Michal Zalewski whom we thank for bringing this problem to our attention. Sendmail urges all users to either upgrade to sendmail 8.12.9 or apply a patch. Note: this is a different problem than the one addressed in 8.12.8. For those not running the open source version, check with your vendor for a patch. If you use the commercial version from Sendmail, Inc. then please see the download page.
    ***************************************************

    I know we use Exim. but should we bother about sendmail security problem????

    Just curious!!!!

    Regards,
     
  2. vishal

    vishal Well-Known Member

    Joined:
    Jan 28, 2003
    Messages:
    340
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    Imp!!!!

    Hello,

    New topic Sorry.

    I have latest WHM/cpanel 6.2.0 and i am on a Stable tree.

    Why Exim sends mail to some domains like Yahoo.com and hotmail but not others.

    I have tried each and every option from the panel and from the forum.

    Upgarded WHM ==> No help!!!!
    Twek settings (Prevent Nobody) ==>>No help !!!!
    suexec enable/disable ==> No help!!!!

    /script/mailperms ==> Nohelp
    /scripts/newexim ==> No help.


    Everyhting in mail and exim

    But still the server is not sending the mails to some domains ?????

    The mail() and the server mails are very Important for me.

    I have lost around 15 + clients ??????

    Plzzzzzzzzzzzzzzz Any Solution for it???????

    Waiting for ur Reply.

    Regards,
     
  3. vishal

    vishal Well-Known Member

    Joined:
    Jan 28, 2003
    Messages:
    340
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    No errors

    Hello,

    I get no errors at all.
    it didn't logged "unroutable domain error" also. i'll post the exim_mainlog entry to u.

    I have a symlink to exim for sendmail

    sendmail --> exim*


    When i type
    echo "Testing" | /usr/sbin/sendmail admin242@domain.com

    tail /var/log/exim_mainlog

    2003-04-08 14:28:58 192xq6-0004nr-00 <= root@server.webhosting24-7.com U=root P=local S=339
    2003-04-08 14:28:58 192xq6-0004nr-00 => hosting4 <admin242@hosting4sale.com> D=localuser T=local_delivery
    2003-04-08 14:28:58 192xq6-0004nr-00 Completed

    This is what it says.

    When i do something on the server . It says CONCATMAIL 3 [3]
    something but no mails. I don't know where to see the log of WHM/cpanle mails.

    regards,
     
  4. NeutralGold

    NeutralGold Well-Known Member

    Joined:
    Jun 5, 2002
    Messages:
    233
    Likes Received:
    0
    Trophy Points:
    16
    Make sure you have reverse dns records for your domain name/ip
     
  5. vishal

    vishal Well-Known Member

    Joined:
    Jan 28, 2003
    Messages:
    340
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    Thanks!!

    Hello,

    Thanks Mine was resolved way back..... :)

    That's very true ==> Reverse DNS !!!

    It worked without it!!!


    Regards,
     
Loading...

Share This Page