Re: qmail vulnerability

2001-02-28 Thread Andy Bradford
Thus said "D. J. Bernstein" on 01 Mar 2001 02:27:37 GMT: >http://www.securityfocus.com/bid/2237 ``Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue.'' Why haven't they updated this? On a properly configured qmail system this is a non-issue

qmail vulnerability

2001-02-28 Thread D. J. Bernstein
The following web pages say that there is a vulnerability in qmail: http://www.securityfocus.com/bid/2237 http://www.securityfocus.com/archive/1/6969 http://www.securityfocus.com/archive/1/6970 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-1999-0144 http://www.insecure.org/splo