[linux-security] Re: Qpop CERT advisory?

[Christopher Hicks <chicks chicks net>]

On Thu, 16 Jul 1998, B. James Phillippe wrote:

> The question was meant to be interpreted: is the POP daemon distributed
> with RedHat affected by the same exploits?  Many people have responded
> with information that doesn't answer the question.  I have also received
> responses from people stating that the POP with RedHat (imap-4.1) is not
> affected, and others who say it is.  I've tried running two of the
> exploits I could find on the Bugtraq archive against a RedHat-4.2 system
> with no success.  So the question still stands: is the imap package
> distributed with RedHat also vulnerable to the qpopper exploit, or any
> other POP exploit?  It doesn't appear to be, but... 

The simplest thing to do is to check the errata on RedHat's web site.
They provide updates and they're usually timely.  They've been doing a
security audit and a number of updates should be installed.

</chris>
-- 
                    load average: 1.00, 1.00, 1.00
~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~'`^`'~*-,._.,-*~