From owner-freebsd-isp  Sat Jun 27 17:46:18 1998
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id RAA25170
          for freebsd-isp-outgoing; Sat, 27 Jun 1998 17:46:18 -0700 (PDT)
          (envelope-from owner-freebsd-isp@FreeBSD.ORG)
Received: from freebie.lemis.com (freebie.lemis.com [139.130.136.133])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA25128;
          Sat, 27 Jun 1998 17:46:11 -0700 (PDT)
          (envelope-from grog@freebie.lemis.com)
Received: (from grog@localhost)
	by freebie.lemis.com (8.9.0/8.9.0) id KAA27929;
	Sun, 28 Jun 1998 10:16:08 +0930 (CST)
Message-ID: <19980628101607.T23035@freebie.lemis.com>
Date: Sun, 28 Jun 1998 10:16:07 +0930
From: Greg Lehey <grog@lemis.com>
To: Taavi Talvik <taavi@uninet.ee>, Jordan Hubbard <jkh@FreeBSD.ORG>
Cc: Jason Godsey <godsey@godsey.net>, isp@FreeBSD.ORG, current@FreeBSD.ORG
Subject: Re: qpopper compromise (was: !!! FLASH TRAFFIC !!! QPOPPER REMOTE ROOT EXPLOIT (fwd))
References: <19980628091010.O23035@freebie.lemis.com> <Pine.BSF.3.95.980628033821.5160A-100000@ns.uninet.ee>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.91.1i
In-Reply-To: <Pine.BSF.3.95.980628033821.5160A-100000@ns.uninet.ee>; from Taavi Talvik on Sun, Jun 28, 1998 at 03:45:22AM +0300
WWW-Home-Page: http://www.lemis.com/~grog
Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia
Phone: +61-8-8388-8286
Fax: +61-8-8388-8725
Mobile: +61-41-739-7062
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Sunday, 28 June 1998 at  3:45:22 +0300, Taavi Talvik wrote:
> On Sun, 28 Jun 1998, Greg Lehey wrote:
>> A fix has been committed to the port.  Download it and rebuild the
>> port if you're interested.
>
> Only thing, popper built with latest patches (incl. patch-ag) dies with
> SIGSEGV on my box immediately when accessed..
>
> This is on current approximately one month old.

Well, at least it doens't compromise the system :-)

I'm copying Jordan on this.  He committed the patch.  You did really
load the port since my message, didn't you?

Greg
--
See complete headers for address and phone numbers
finger grog@lemis.com for PGP public key

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message