Hi. This isn't really my bag, but I rolled a tarball out of autorespond with the debian CAN-2003-0654 patch applied, I also added their man page and a ChangeLog file. Please use this one or roll an authorized tar ball immediately (Ken Jones?).
Here's my tar ball: http://www.deserve-it.com/sw/src/autorespond/autorespond-2.0.4.tar.gz Here's the announcement: http://www.securityfocus.com/advisories/5716 -- Regards // Oden Eriksson, Deserve-IT.com