andyl
Verified User
Which version of UW IMAP is the DA imapd based on? Versions of UW IMAP prior to imap-2004g (released Sep 15 2005) apparently allow arbitrary code execution with a valid account on the server:
http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true
or, more concisely:
http://secunia.com/advisories/17062/
Thanks,
Andy
http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true
or, more concisely:
http://secunia.com/advisories/17062/
Thanks,
Andy