Re: NTmail and VRFY

• Previous message: S, Jared: "Insecure default permissions for MailMan Professional Edition,"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Just as a followup to this. In NTmail 5 (which was fresh out of beta this
month) this does fix things and turns VRFY off, however in NTmail 4.3c it is
broken and does nothing. Johns from gordano confirmed this to me a short
while ago.

Geo.


> -----Original Message-----
> From: Bugtraq List [mailto:BUGTRAQat_private]On Behalf Of NTMail
> Support
> Sent: Wednesday, December 01, 1999 10:40 AM
> To: BUGTRAQat_private
> Subject: Re: NTmail and VRFY
>
>
> George,
>
> Many thanks for raising the issue of the VRFY command with NTMail.
>
> I can confirm:
>
> a.  That the option in the GUI does not switch the VRFY command
> on and off.
>     And that this has been raised as an Observation Report to be fixed in
>     the next release of NTMail.
>
> b.  To switch of the VRFY command, select "Support > System Variables" and
>     choose the "AllowVRFY" variable from the drop-down.  Set this to the
>     value 0 and press "Change Value".  You will now see the response:
>         558 VRFY not allowed.
>
> We welcome comments on any security issues with NTMail.  The usual
> procedure is to direct issues to supportat_private
>
> Brian

• Next message: Martin Peter: "WebSphere protections from installation"
• Previous message: S, Jared: "Insecure default permissions for MailMan Professional Edition,"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:16:25 PDT