Re: [cobalt-security] New poprelayd rpm available

[Jeff Lovell <jlovell@xxxxxxx>]

On 09 Jul 2001 22:33:47 +0100, Gossi The Dog wrote:
>
> I've mirrored it on owned.lab6.com, the URL is;
> 
> http://gossi.users.lab6.com/RaQ-security/files/poprelayd-2.0-4.noarch.rpm

Thanks.

> Out of interest, have you read the rest of the discussion on bugtraq Jeff?
> There's some more discussion on the list about this.

I've been watching the discussion on the list.  I also contacted the
person who filed it offlist.  I was a little disappointed that they
didn't notify us before the posting so we could have reacted to it a
little better.
 
> There's also the Qube Webmail vuln - I forwarded it to this list from
> bugtraq last week.

We already have a patch for that in the works also.  We are working with
a fix right now.  The vuln against webmail isn't as severe as the
poprelayd bug in that the user is only allowed to read files that he/she
owns, are group readable (assuming they are in the group), and world
readable.  So, it is just as if the user has telnet access.  It isn't
very desirable, but isn't quite a root exploit.

Jeff
-- 
Jeff Lovell
Sun Microsystems Inc.