[24705] in bugtraq
Re: Bug in QPopper (All Versions?)
daemon@ATHENA.MIT.EDU (Dustin Childers)
Fri Mar 15 17:35:05 2002
Date: 15 Mar 2002 20:07:12 -0000
Message-ID: <20020315200712.5231.qmail@mail.securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: Dustin Childers <dustin@acm.org>
To: bugtraq@securityfocus.com
In-Reply-To: <20020315015110.14475.qmail@mail.securityfocus.com>
I forgot to mention that this was only tested on
RedHat 7.2. But any Operating System that runs
QPopper could be vulnerable. The problem seems to
be that QPopper goes into an infinited loop waiting for
more requests.
Dustin E. Childers
Security Administrator
http://www.digitux.net/