Slashdot Mirror

← Back to Stories (view on slashdot.org)

CERT: Sendmail Distribution Contained Trojan Horse

Posted by michael on from the security-starts-inside dept.

Scoria writes "According to a CERT advisory published this afternoon, the public distribution of Sendmail 8.12.6 contained a trojan horse from September 28 to October 6. For more detailed information, please consult advisory CA-2002-28." This sounds very much like what happened to OpenSSH.

5 of 324 comments (clear)

  1. But that's okay... by Anonymous Coward · · Score: 5, Funny

    As long as you could also get the source to the Trojan, as well... right?

  2. Thank GOD for Microsoft! by eamber · · Score: 5, Funny

    Good thing I use Exchange Server. I've got a tight ship there.

    1. Re:Thank GOD for Microsoft! by Sabalon · · Score: 5, Funny

      Don't forget that according to the earlier article you will now need to pay extra for that tight ship - otherwise you get the submarine with the screen door.

  3. Re:Checksums by Anonymous Coward · · Score: 5, Funny

    Also can't forget about the black hats and chinese/russian/terrorist groups as well.

    Incorrect md5 sums certainly strike terror into my heart.

  4. Re:Hardly news ... by Trogre · · Score: 5, Funny

    Let's see, a Trojan Horse is basically defined as an undocumented chunk of code hiding inside a program, which does something that you don't know about or understand.

    Not quite.
    A Trojan Horse is defined as a big wooden horse which sat outside the ancient city of Troy, just large enough to happily contain 700 greeks in full battle dress and still leave adequate room for toilet facilities.

    For more information read Homers's Iliad.

    --
    "Nine times out of ten, starting a fire is not the best way to solve the problem." - my wife