I just saw this on bugtraq:
A problem in the Courier sqwebmail package, a CGI program to grant
authenticated access to local mailboxes, has been discovered. The
program did not drop permissions fast enough upon startup under
certain circumstances so a local shell user can execute the sqwebmail
binary and manage to read an arbitrary file on the local filesystem.
Yahoo! Groups TipsDid you know...Show off your group to the world. Share a photo of your group with us. |
Having problems with message search?
Fill out this form to ensure your group is one of the first to be migrated to the new message search system.
|
Offline 
Send Email