test_scratch / cti-ATT-CK-v13.1 /capec /2.1 /course-of-action /course-of-action--0d0e8c85-a2de-43ee-aa5a-3fb5d75c14c8.json
khoicrtp's picture
Upload 2298 files
5fe70fd
raw
history blame
2.34 kB
{
"id": "bundle--b011af89-4e1a-47de-a2fc-f3c9fd26d565",
"objects": [
{
"created": "2014-06-23T00:00:00.000Z",
"created_by_ref": "identity--e50ab59c-5c4f-4d40-bf6a-d58418d89bcd",
"description": "\n <xhtml:p>Disable the 7 to 8 bit conversion. This can be done by removing the F=9 flag from all Mailer specifications in the sendmail.cf file.</xhtml:p>\n <xhtml:p>For example, a sendmail.cf file with these changes applied should look similar to (depending on your system and configuration):</xhtml:p>\n <xhtml:div style=\"margin-left:10px;\" class=\"informative\">Mlocal, P=/usr/libexec/mail.local, F=lsDFMAw5:/|@qrmn, S=10/30, R=20/40,<xhtml:div style=\"margin-left:10px;\">T=DNS/RFC822/X-Unix,A=mail -d $u</xhtml:div>\n Mprog, P=/bin/sh, F=lsDFMoqeu, S=10/30, R=20/40,<xhtml:div style=\"margin-left:10px;\">D=$z:/,T=X-Unix,A=sh -c $u</xhtml:div>\n </xhtml:div>\n <xhtml:p>This can be achieved for the \"Mlocal\" and \"Mprog\" Mailers by modifying the \".mc\" file to include the following lines:</xhtml:p>\n <xhtml:div style=\"margin-left:10px;\" class=\"informative\">define(`LOCAL_MAILER_FLAGS',<xhtml:div style=\"margin-left:10px;\">ifdef(`LOCAL_MAILER_FLAGS',<xhtml:div style=\"margin-left:10px;\">`translit(LOCAL_MAILER_FLAGS, `9')',`rmn'))</xhtml:div>\n </xhtml:div>\n define(`LOCAL_SHELL_FLAGS',<xhtml:div style=\"margin-left:10px;\">ifdef(`LOCAL_SHELL_FLAGS',<xhtml:div style=\"margin-left:10px;\">`translit(LOCAL_SHELL_FLAGS, `9')',`eu'))</xhtml:div>\n </xhtml:div>\n </xhtml:div>\n <xhtml:p>and then rebuilding the sendmail.cf file using m4(1).</xhtml:p>\n <xhtml:p>From \"Exploiting Software\", please see reference below.</xhtml:p>\n ",
"id": "course-of-action--0d0e8c85-a2de-43ee-aa5a-3fb5d75c14c8",
"modified": "2021-10-21T00:00:00.000Z",
"name": "coa-42-1",
"object_marking_refs": [
"marking-definition--17d82bb2-eeeb-4898-bda5-3ddbcd2b799d"
],
"spec_version": "2.1",
"type": "course-of-action",
"x_capec_version": "3.7"
}
],
"type": "bundle"
}