The List has returned!

[Gerald Combs]

On Thu, 31 Jul 2003, Frank Wiles wrote:

>   Also, the days when Sendmail was a big security risk are pretty much
>   gone.  Yes I will admit it has had a checkered past, but honestly
>   how many Sendmail specific security holes have there been in the
>   last year? 

According to cve.mitre.org, there have been several:

  http://www.cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sendmail

Granted, most of these are specific to a particular OS or distribution but
at least one (CAN-2002-1337) features a remote buffer overflow.