Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

[Russell Nelson]

Adam McKenna writes:
 > In that case, what would you recommend?

Securing vchkpop.  There is no reason to limit the username or
password information to 40 characters, even if the RFC does say to do
it.

-- 
-russ nelson <[EMAIL PROTECTED]>  http://russnelson.com
Crynwr sells support for free software  | PGPok | "Ask not what your country
521 Pleasant Valley Rd. | +1 315 268 1925 voice | can force other people to
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | do for you..."  -Perry M.