Re: NTmail and VRFY

From: NTMail Support (supportat_private)
Date: Wed Dec 01 1999 - 07:39:56 PST

Next message: Gerardo Richarte: "Security Advisory: Buffer overflow in RSAREF2"

Previous message: bugtraqat_private: "Re: Default IE 5.0 security settings allow frame spoofing"
Next in thread: Geo.: "Re: NTmail and VRFY"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

George,

Many thanks for raising the issue of the VRFY command with NTMail.

I can confirm:

a.  That the option in the GUI does not switch the VRFY command on and off.
    And that this has been raised as an Observation Report to be fixed in
    the next release of NTMail.

b.  To switch of the VRFY command, select "Support > System Variables" and
    choose the "AllowVRFY" variable from the drop-down.  Set this to the
    value 0 and press "Change Value".  You will now see the response:
        558 VRFY not allowed.

We welcome comments on any security issues with NTMail.  The usual
procedure is to direct issues to supportat_private

Brian

Next message: Gerardo Richarte: "Security Advisory: Buffer overflow in RSAREF2"
Previous message: bugtraqat_private: "Re: Default IE 5.0 security settings allow frame spoofing"
Next in thread: Geo.: "Re: NTmail and VRFY"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:15:18 PDT