Re: remote root qmail-pop with vpopmail advisory and exploit with patch (fwd)

[Robert Varga]

On Mon, 24 Jan 2000, iv0 wrote:

> Robert Varga wrote:
> > 
> > On Sun, 23 Jan 2000, iv0 wrote:
> > 
> > >
> > > I recommend upgrading to the latest version of vpopmail which fixes
> > > the exploit. Pick up the current stable version:
> > 
> > So it is fixed from version 3.4.11?
> > 
> > Robert Varga
> 
> Yes, version 3.4.11j as of Jan 20th has the fix.
> 
> Ken Jones
> 

If the fix is appliable to an earlier version, could it be posted
separately, to provide possibility to patch the current debian (3.4.9)
version until Jon Marler packages 3.4.11?

Robert Varga