DNS map problem in 8.12.x before 8.12.9

--0OAP2g/MAC+5xKAE
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

There is a potential problem in sendmail 8.12.8 and earlier sendmail
8.12.x versions with respect to DNS maps.  The bug did not exist in
versions before 8.12 as the DNS map type is new to 8.12.  The bug was
fixed in 8.12.9, released March 29, 2003 but not labeled as a security
fix as it wasn't believed to be a security bug at the time:

	Properly initialize data structure for dns maps to avoid various
		errors, e.g., looping processes.  Problem noted by
		Maurice Makaay of InterNLnet B.V.

Note that only FEATURE(`enhdnsbl') uses a DNS map.  We do not have an
assessment whether this problem is exploitable, however, if you use a
DNS map and an 8.12 version older than 8.12.9, then either upgrade
(strongly recommended) or apply the trivial patch given below.

This problem has been reported to FreeBSD by Oleg Bulyzhin, see

http://www.freebsd.org/cgi/query-pr.cgi?pr=3Dbin/54367

Here's a quote from the report:

   Fix
         =20
        Use sm_resolve.c coming with sendmail 8.12.9 or use this patch:
  =20
--- sm_resolve.c.orig   Fri Jun 28 00:43:24 2002
+++ sm_resolve.c        Thu Jul 10 01:21:17 2003
@@ -233,6 +233,7 @@
			dns_free_data(r);
			return NULL;
		}
+		memset(*rr, 0, sizeof(**rr));
		(*rr)->rr_domain =3D sm_strdup(host);
		if ((*rr)->rr_domain =3D=3D NULL)
		{



--0OAP2g/MAC+5xKAE
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (OpenBSD)

iQCVAwUBP0oyuSGD4bE5bweJAQEILAP/XLdDmgmUAvJMQFLbQaSX3kB8d2xc2wmT
SCFPPGrMFlI6Liy00+OsIgaDjkenQsscvGqaG8BXRIXEvNuj7YSPeB1iMsWcXg1L
v5G0tP2/4ptCP0gjISu8rI3Nv+eL3gSPVU2NaQ+onLd6mF6nGZa0YtzBeappxqqI
esJZSk+DIsE=
=ZO1r
-----END PGP SIGNATURE-----

--0OAP2g/MAC+5xKAE--