Sendmail Vunerability

[demonicfoetus]

Hey guys

Apparantely there is a major exploit for all sendmail software allowing blocking of the flow of email and intercepting e-mail.

http://story.news.yahoo.com/news?tmpl=story&ncid=582&e=1&cid=582&u=/nm/20030303/wr_nm/tech_email_dc

"All commercial versions of Sendmail, as well as open-source versions from 5.79 and above are vulnerable, the companies said. Any Sendmail programs based on open source, which can be copied and modified freely, are also at risk. "

Does this mean PHP send mail is a risK? Is there a patch for the PHP software avaiable yet?

byee,
DF

[Sxooter]

Technically this is NOT a PHP problem, it is a sendmail problem. Since PHP can work with many different mail transfer agents (hereafter referred to as MTAs) there is nothing to be done in PHP to fix it.

I run RedHat Linux, which uses sendmail, so my fix is to download the latest sendmail package from a redhat mirror.

Or, I could uninstall sendmail and install another MTA of my choice, either from source or a package if I can find one.

PHP just uses sendmail, sendmail isn't integrated into it.