[cobalt-security] [SECURITY WARNING] All Neomail users

[Hostmaster of the day <hostmaster@xxxxxxxxxxxxx>]

uninstalled
re-installed
DONE !

(HotD****)


****************************************************
Dear Taco,

since we updated NeoMail to version 1.25-4 we've got 
the following problem :

INVALID LOGIN 

Sorry, the password you entered was incorrect! 
Please go back and try again.

The password was correct but not accepted by
NeoMail. All passwords are failing.

What can we do ?

Sincerely,
Mark (HotD*)
 

----- Original Message ----- 
From: "Taco Scargo" <taco.scargo@xxxxxxx>
To: <cobalt-security@xxxxxxxxxxxxxxx>
Cc: "Jeff Lovell" <jlovell@xxxxxxx>
Sent: Wednesday, November 14, 2001 11:00 PM
Subject: [cobalt-security] [SECURITY WARNING] All Neomail users


> Dear Neomail users,
> 
> Earlier today I was informed that installation of the Neomail
package that I
> created and published on http://pkg.nl.cobalt.com contains code
that opens
> up a potential security threat. After close investigation I have now
> prepared an updated version (1.25-4) that does not contain this
security
> threat anymore and closes the one that was created by installing
any of the
> prior versions (1.25-1 to 1.25-3). I therefore advise all Neomail
package
> users to install the update as soon as possible.Additionally I also
fixed a
> problem that occurred when forwarding messages with attachments.
> 
> Although this package has not received the proper testing it should
have
> had, I believe (due to the nature of the changes) the update will
not cause
> any problems, and Neomail will keep working properly.
> 
> The update can be applied over any previous version, but also as a
fresh
> install. As always: please be reminded that this software is
provided as-is
> without warranty and support. Please read the disclaimer (About
this site)
> on http://pkg.nl.cobalt.com closely before installing any software
from this
> website.
> 
> With regards,
> 
> Taco Scargo
> Professional Services Manager, EMEA
> 
> Sun Microsystems
> Sun Cobalt Server Appliances
> 
> _______________________________________________
> cobalt-security mailing list
> cobalt-security@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-security
>