At 05:15 AM 3/12/2003, Mark wrote:
----- Original Message -----
From: "Mike Tancsa" <[EMAIL PROTECTED]>
To: "Subscribers of Qpopper" <[EMAIL PROTECTED]>
Sent: Tuesday, March 11, 2003 11:59 PM
Subject: Fwd: QPopper 4.0.x buffer overflow vulnerability


> Does anyone know if there is a patch for this or an updated version in the > works ? > > ---Mike


I dunno; the source of the exploit does not even compile on FreeBSD 4.7R, so I cannot check the vulnerability, even. :( They say there is a 4.0.5fc2 build, but I will not install a beta version just for one day.

I tested out the 4.0.5fc2 last evening and it's working well. From what Randall told me last night, I expect the 4.0.5 will be identical to the 4.0.5fc2.


Dan



Reply via email to