4 ms·
That's for pointing this out. It is pretty ridiculous just how trivial and severe this is, indeed. However, given the lower prevalence of OpenBSD, I'd be inte
by cnst 7y ago
That's for pointing this out.
It is pretty ridiculous just how trivial and severe this is, indeed.
However, given the lower prevalence of OpenBSD, I'd be interested to know whether anyone has any data on whether this is being exploited in the wild.
- boring_twenties 7y agoNo data, but it only listens on localhost by default.
- cnst 7y agoDo you think anyone who changes the default also changes the delivery to Maildir? (So, at a minimum, it's a local user privilege escalation, of any user to root, in the default install?)