Re: Netscape Messaging Server RCPT TO vul.

From: Alan Brown (alanat_private)
Date: Thu Oct 28 1999 - 22:42:43 PDT

Next message: Eivind Eklund: "Re: Fix for ssh-1.2.27 symlink/bind problem"

Previous message: Flothow, Sebastian: "AW: Mac OS 9 Idle Lock Bug"
Maybe in reply to: Nobuo Miwa: "Netscape Messaging Server RCPT TO vul."
Next in thread: Nobuo Miwa: "Re: Netscape Messaging Server RCPT TO vul."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thu, 28 Oct 1999, Nobuo Miwa wrote:

> I've discussed with Netscape's engineer for 7 weeks.
> about RCPT TO vulnerability.
> I reported them on 7th Sep. as followings...

This has been known about for a while, along with a rather nasty
relaying vulnerability in Netscape's distributed antirelay settings.

There are a bunch of fixes at http://www.tsc.com/~bobp/nms-no-relay.html

AB

Next message: Eivind Eklund: "Re: Fix for ssh-1.2.27 symlink/bind problem"
Previous message: Flothow, Sebastian: "AW: Mac OS 9 Idle Lock Bug"
Maybe in reply to: Nobuo Miwa: "Netscape Messaging Server RCPT TO vul."
Next in thread: Nobuo Miwa: "Re: Netscape Messaging Server RCPT TO vul."
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:09:12 PDT