Subject: poppassd buffer overflow?
To: None <tech-pkg@netbsd.org>
From: Martti Kuparinen <martti.kuparinen@iki.fi>
List: tech-pkg
Date: 04/30/2002 14:40:04
Hi!

Should we be worried about this?

fw:~> telnet localhost 106
200 fw poppassd v4.0.3 hello, who are you?
USER username
200 your password please.
PASS oldpass
200 your new password please.
NEWPASS newpass
200 Password changed, thank-you.
fw:~>

And from /var/log/messages:

Apr 30 14:20:36 fw poppassd[22010]: buffer overflow on read from child
Apr 30 14:20:36 fw poppassd[22010]: password changed for username

I have this in inetd.conf:

poppassd stream tcp nowait root /usr/pkg/libexec/poppassd poppassd

Martti

---
Martti Kuparinen <martti.kuparinen@iki.fi>      NetBSD - No media hype
http://www.iki.fi/kuparine/                     http://www.netbsd.org/