From: 4NET <da...@4n...> - 2003-07-02 21:43:06
|
Hello, I found a serious problem in the ACL of sendmail. I allowed people to be able to attach server-side files to emails. First I thought that the access will be limited to the unix user's home, but then I saw that users could attach the /etc/shadow to emails. Please be so kind to extend the functionality of this option to user's home. Kind regards, -Dan Popovici- Technical Support ----4NET Hosting----- tel: +40-722-588679 email:su...@4n... http://www.4net.st |