[1501] in linux-security and linux-alert archive

home help back first fref pref prev next nref lref last post

[linux-security] Is qpopper vulnerable?? Re: CERT Advisory CA-97.09 - Vulnerability in IMAP and POP

daemon@ATHENA.MIT.EDU (Daniel Pewzner)
Tue Apr 8 07:01:09 1997

Date: Mon, 7 Apr 1997 23:33:35 -0700 (PDT)
From: Daniel Pewzner <vegi@eskimo.com>
To: linux-security@redhat.com
Resent-From: linux-security@redhat.com
Reply-To: linux-security@redhat.com

  I've got qualcomm's qpopper2.2, and am not sure if its vulnerable.  The
advisory mentions pop and imap servers, but only says:

     version of IMAP (Section B).  If your POP server is based on the
     University of Washington IMAP server code, you should also upgrade to
     the latest version of IMAP. Until you can take one of these actions, 

I installed the new imapd about 3 weeks ago.  I'm just uptight that the
qualcomm qpopper may be vulnerable too.  Has anyone with the ability to
disect the code taken a good look?  Thanks, Dan


home help back first fref pref prev next nref lref last post