Patch-ID# 102414-01 Keywords: mail, /bin/mail, sendmail, security Synopsis: SunOS 4.1.4: mail jumbo patch Date: Mar/20/95 Solaris Release: 1.1.2 SunOS Release: 4.1.4 Topic: /bin/mail jumbo patch Notes: This patch is available for 4.1.3_U1 as 101436-08. BugId's fixed with this patch: 1115042 1161618 1154720 Changes incorporated in this version: Revalent Architectures: sparc NOTE:all Obsoleted by: Files included with this patch: mail Problem Description: 1154720 --> 4.x mail/rmail and ignores messages after single dot line 1161618 --> /bin/mail contains a race condition that may be exploited to obtain root access. 1115042 --> mail crashes when value for MAXLET exceeded. Patch Installation Instructions: As root, make a backup copy of files to be patched: mv /bin/mail /bin/mail.FCS Now install the patched files: cp mail /bin/mail Set correct permissions: chmod 4755 /bin/mail chown root.staff /bin/mail