Hi,
So THAT is the way these trojans are getting into my mailserver... :-((((
Sophos is getting them but I was unable to find the attac vector.
Grrrrrrr. So it seesm this bug is only fixed in IMail 8.2 and was never
fixed in earlier versions. Might have been nice of Ipswitch to have a BIG
warning on their site to tell us about his. I had heard about a buffer
overflow in IMail but was unable to verify which parts were vulnerable. I'll
be on the phone with them in a few minutes to see what action I need to
take.
People.... there ARE worms loose using this vulnerability to penetrate the
mailserver. Sophos reports it as Troj/ServU-Gen.
Groetjes,
Bonno Bloksma
----- Original Message -----
From: "Russ Uhte" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, August 09, 2005 2:50 PM
Subject: Re: [IMail Forum] IMAP service stopping...
Just recently this started happening. Users with IMAP accounts not able
to get mail. Checked my services & IMAP service has stopped, although
nothing showing up in event viewer. Any suggestions as to why? I have set
the service to restart after a failure. How could I get it to send an
alert email?
Thanks-
I'd be willing to bet that you're getting hit with that exploit code that
was released a few months ago. For more info:
http://www.securityfocus.com/archive/1/400543
Here's the PoC that was released...
http://seclists.org/lists/fulldisclosure/2005/Jun/0075.html
And trust me, it does work...
This is the whole reason why I'm switching to qmail in the *very* near
future :)
-Russ
---
[This E-mail scanned for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
---
[E-mail scanned at tio.nl for viruses by Declude Virus]
---
[E-mail scanned at tio.nl for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
