Subject: Re: pkgsrc/mail/qpopper vulnerability
To: None <mishka@terabyte.com.ua>
From: Takahiro Kambe <taca@back-street.net>
List: tech-pkg
Date: 09/17/2003 01:12:43
In message <20030916185401.5705f694.mishka@terabyte.com.ua>
	on Tue, 16 Sep 2003 18:54:01 +0300,
	"Mike M. Volokhov" <mishka@terabyte.com.ua> wrote:
> Greetings!
Hi.

> I've found the following security issue about QPopper 4.0.5
> (pkgsrc/mail/qpopper); it covers popassd utility:
> 
> 	http://www.securityfocus.com/bid/7447
> 
> However, it is not in pkg-vulnerabilities list.
This problem is fixed with poppassd package 4.0.5nb1 and
pkg-vulnerabilities contains a line as below.

poppassd<4.0.5nb1       local-root-shell        http://www.securityfocus.com/archive/1/319811/2003-04-26/2003-05-02/0

NetBSD's qpopper package dosen't contain poppassd program.

Cheers.

-- 
Takahiro Kambe <taca@back-street.net>