Re: Remote Execution of Commands in Omail Webmail 0.98.4 and earlier

From: Olivier M. (qmailat_private)
Date: Thu Aug 21 2003 - 02:24:30 PDT

Next message: Eric Knight: "Announcement: "A Treatise on Informational Warfare""

Previous message: Florian Weimer: "[Full-Disclosure] Re: Popular Net anonymity service back-doored"
In reply to: Phillip Whelan: "Remote Execution of Commands in Omail Webmail 0.98.4 and earlier"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, Aug 19, 2003 at 07:15:32PM -0000, Phillip Whelan wrote:
> Product: Omail Webmail
> The flaw occurs in the function checklogin();

thx, version 0.98.5 released today, including your bugfix:
http://prdownloads.sourceforge.net/omail/omail-webmail-0.98.5.tar.gz

> The author was contacted two weeks ago, but did not
> respond.

summertime -> ever heard of holidays... ? :)  

regards,
Olivier
-- 
_________________________________________________________________
 Olivier Mueller - omat_private - PGPkeyID: 0E84D2EA - Switzerland
qmail projects: http://omail.omnis.ch  -  http://webmail.omnis.ch

Next message: Eric Knight: "Announcement: "A Treatise on Informational Warfare""
Previous message: Florian Weimer: "[Full-Disclosure] Re: Popular Net anonymity service back-doored"
In reply to: Phillip Whelan: "Remote Execution of Commands in Omail Webmail 0.98.4 and earlier"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Aug 21 2003 - 14:12:36 PDT