Search results

See http://www.squirrelmail.org/security/issue/2006-06-01 for details. Andy

Which version of UW IMAP is the DA imapd based on? Versions of UW IMAP prior to imap-2004g (released Sep 15 2005) apparently allow arbitrary code execution with a valid account on the server: http://www.idefense.com/application/poi/display?id=313&type=vulnerabilities&flashstatus=true or, more...

Something I just discovered and fixed: Seeing errors like this in your /var/log/maillog on FreeBSD? Sep 27 00:02:52 h01 vm-pop3d[81780]: Connect from www.xxx.yyy.zzz Sep 27 00:02:52 h01 vm-pop3d[81780]: in openpam_load_module(): no /lib/security/ pam_pwdb.so found Sep 27 00:02:52 h01...

PhpMyAdmin 2.6.1-pl1 is out, fixing a few security issues; From the release notes: - (pl1) Possible XSS attack - (pl1) Remote file inclusion - (pl1) Error when blowfish_secret is empty - (pl1) Wrong parameter count with PHP 4.1.x - (pl1) (Japanese) Undefined index - (pl1) (mysqli) Wrong...

SquirrelMail 1.4.4 is out, addressing three security issues: http://www.squirrelmail.org/security/issue/2005-01-20 http://www.squirrelmail.org/security/issue/2005-01-19 http://www.squirrelmail.org/security/issue/2005-01-14 Updating jmstacey's upgrade script to use version 1.4.4 worked fine. Andy

I'm approaching my first monthly renewal for DA. Over the past couple of nights I've gotten messages that a new license has been downloaded, but from the licensing/updates link, I only see the old license. I did see on site-helper.com that "Manual updates (both software and license) are...

I'm having difficulty with SMTP authentication in a new DA installation on FreeBSD 5.2.1. I've walked thorough exim.pl, even put debug logging statements in it, and it appears that it successfully verifies users (that is, returns "yes"); however, exim returns: plain authenticator failed for...