From owner-freebsd-security Mon Aug 24 15:18:13 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA15346 for freebsd-security-outgoing; Mon, 24 Aug 1998 15:18:13 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from xylan.com (postal.xylan.com [208.8.0.248]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA15328 for ; Mon, 24 Aug 1998 15:18:11 -0700 (PDT) (envelope-from wes@softweyr.com) Received: from mailhub.xylan.com by xylan.com (8.8.7/SMI-SVR4 (xylan-mgw 2.1 [OUT])) id PAA17665; Mon, 24 Aug 1998 15:18:56 -0700 (PDT) Received: from utah.XYLAN.COM by mailhub.xylan.com (SMI-8.6/SMI-SVR4 (mailhub 2.1 [HUB])) id PAA21296; Mon, 24 Aug 1998 15:16:06 -0700 Received: from softweyr.com by utah.XYLAN.COM (SMI-8.6/SMI-SVR4 (xylan utah [SPOOL])) id QAA22718; Mon, 24 Aug 1998 16:16:06 -0600 Message-ID: <35E1E626.8B26000C@softweyr.com> Date: Mon, 24 Aug 1998 16:16:06 -0600 From: Wes Peters Organization: Softweyr LLC X-Mailer: Mozilla 4.04 [en] (X11; I; FreeBSD 2.2.6-RELEASE i386) MIME-Version: 1.0 To: "Dag-Erling Coidan Smørgrav" CC: freebsd-security@FreeBSD.ORG Subject: Re: REQ: free pop3 daemon recommendations References: <20938.903553244@axl.training.iafrica.com> <35DE1217.8472B1A1@softweyr.com> Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Dag-Erling Coidan Smørgrav wrote: > > Wes Peters writes: > > imap-uw has had more than it's share of security exploits of late, too. > > The FreeBSD version has (hopefully) been patched to keep up with them. > > I'm aware of only one recent imap-uw exploit, in 4.1b IIRC. I'd be > grateful for any information about other security problems with > imap-uw. That's probably the one I'm thinking of. IIRC, those who looked it over found the code a ripe ground for buffer overflows, and the code generally of poor "university hackathon" quality. Too bad Charlie Crittenden (my most stringent prof in CS) wasn't the principal investigator, the code would be prettier than a Pulitzer prize winning novel, AND work better, too. He was a gem. -- "Where am I, and what am I doing in this handbasket?" Wes Peters Softweyr LLC http://www.softweyr.com/~softweyr wes@softweyr.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message