Re: Netscape Messaging Server RCPT TO vul.

[Alan Brown]

On Thu, 28 Oct 1999, Nobuo Miwa wrote:

> I've discussed with Netscape's engineer for 7 weeks.
> about RCPT TO vulnerability.
> I reported them on 7th Sep. as followings...

This has been known about for a while, along with a rather nasty
relaying vulnerability in Netscape's distributed antirelay settings.

There are a bunch of fixes at http://www.tsc.com/~bobp/nms-no-relay.html

AB