grsecurity and latest sendmail vulnerability

[marcin_1]

Hi,
does grsecurity protects against exploiting latest sendmail vulnerability?
http://xforce.iss.net/xforce/alerts/id/216
If yes, then what options should be turned on?

Regards.

[PaX Team]

Hi,
does grsecurity protects against exploiting latest sendmail vulnerability?
http://xforce.iss.net/xforce/alerts/id/216
If yes, then what options should be turned on?

it always depends on the exploit technique used and the answer is always the same: runtime code generation based exploits cannot work, the rest may (with or without having to guess randomization, depending on the nature of the bug, info leaking, whatnot).

[Platyna]

Here is a document about how to check if you are vulnerable:
http://rapturesecurity.org/jack/exploit ... dmail.html
However I would simply recommend you upgrade to newest version.

Regards.