[404] in linux-security and linux-alert archive
Re: (fwd) [Linux-ISP] U R G E N T!!!! S E C U R I T Y A L E R T!!!!!!! READ NOW!!
daemon@ATHENA.MIT.EDU (root)
Wed Oct 4 18:58:31 1995
Date: Wed, 4 Oct 1995 13:08:04 -0700 (PDT)
From: root <root@northwest.com>
To: Panzer Boy <panzer@dhp.com>
cc: linux-security@tarsier.cv.nrao.edu
In-Reply-To: <199510041528.LAA20720@dhp.com>
> I have recently discovered a security flaw in pop3d Version 1.004 with
> shadow password support. (Not sure about the version without shadow
> support, but you might want to check).
[mod: rest of quoted article removed --okir]
I checked my non-shadow system, and it doesn't let me read other mail
without the actual passwd.
sean