Qpopper 2.53 remote problem, user can gain gid=mail (fwd)

Instead of the file pop_msg.c, which should be patched as mentioned in the advisory, it seems to be rather pop_uidl.c Cheers, Peter -- Peter Münster http://gmv.spm.univ-rennes1.fr/~peter/ ---------- Forwarded message ---------- Date: Tue, 23 May 2000 09:43:33 -800 From: Prizm To: BUGTRAQ@SECURITYFOCUS.COM Subject: Qpopper 2.53 remote problem, user can gain gid=mail I have attached to this message the advisory with full details + exploit on this problem. Prizm/b0f,