[cobalt-security] poprelay: serious security bug

["Jonathan Michaelson" <michaelsonjd@xxxxxxxxxxx>]

Hello,

For those running the poprelayd POP-before-relay daemon (including the
"official" Cobalt release), you should note that a serious bug + exploit has
been posted to BugTraq with specific reference to the Cobalt RaQ3 (but will
certainly affect _all_ the RaQ servers running poprelayd):

http://www.securityfocus.com/templates/archive.pike?mid=194906&threads=0&lis
t=1&end=2001-07-07&start=2001-07-01&fromthread=0&

The bug + exploit allows anyone to relay mail through the server. We can
only hope that Cobalt comes out with a remedy for this problem *very*
quickly.

Regards,
Jonathan