[27017] in bugtraq

home help back first fref pref prev next nref lref last post

Roaring Penguin fixes for "Bypassing SMTP Content Protection with

daemon@ATHENA.MIT.EDU (David F. Skoll)
Thu Sep 12 13:36:04 2002

Date: Thu, 12 Sep 2002 13:06:06 -0400 (EDT)
From: "David F. Skoll" <dfs@roaringpenguin.com>
To: bugtraq@securityfocus.com
In-Reply-To: <004801c25a62$9a9b5080$0c01a8c0@beyondmobile1>
Message-ID: <Pine.LNX.4.44.0209121255190.8643-100000@shishi.roaringpenguin.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

We at Roaring Penguin Software Inc. have updated our products to deal
with the vulnerability at http://online.securityfocus.com/archive/1/291514

MIMEDefang:  We have released version 2.21 of MIMEDefang at
http://www.roaringpenguin.com/mimedefang/  The default filter
blocks message/partial types.

CanIt:  We have released version 1.2-F17 of our commercial CanIt
anti-spam solution.  This release is based on MIMEDefang 2.21.

MIME-Tools:  We have updated our patched version of MIME-Tools at
http://www.roaringpenguin.com/mimedefang/MIME-tools-5.411a-RP-Patched.tar.gz
MIME-Tools is a Perl module for parsing MIME messages.  The patched
version now can descend into message/partial as well as message/rfc822
attachments.  Our patched version also fixes various other vulnerabilities
in the official package (see http://online.securityfocus.com/archive/1/275282)

Regards,

David.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9gMmHxu9pkTSrlboRAry3AJ4jE+4XurEOIqPtFt8nxRP6/xE2lQCfdAOw
QZHmeIlayd8mkMeKTpE0tDU=
=M+gb
-----END PGP SIGNATURE-----


home help back first fref pref prev next nref lref last post