hi

when trying to log into a existing account, but with a wrong password, the vchkpw 
process
crashes:

Trying someip...
Connected to somehost.
Escape character is '^]'.
+OK <28567.965406482@somehost>
user flavio.curti
+OK 
pass aoeuaoeuaoeu
-ERR aack, child crashed
Connection closed by foreign host.

i have no idea if this could be exploitable, but it somewhat scares me :)
i noticed on all my vpopmail systems, running vpopmail-4.8a, on slackware & redhat...
options:
/configure  --enable-qmaildir=/usr/local/qmail --enable-admin=admin@somehost
--enable-tcpserver-file=/usr/local/etc/tcp.smtp.cdb

no traces in any logfiles (i log via svscan/multilog)....

any ideas, fixes, whatever?

thonks & greetz Flavio

-- 
-=: http://frame-eleven.com :=-.

Reply via email to