Bugtraq mailing list archives

Re: Netscape Messaging Server RCPT TO vul.

From: alan () MANAWATU GEN NZ (Alan Brown)
Date: Fri, 29 Oct 1999 18:42:43 +1300


On Thu, 28 Oct 1999, Nobuo Miwa wrote:

I've discussed with Netscape's engineer for 7 weeks.
about RCPT TO vulnerability.
I reported them on 7th Sep. as followings...


This has been known about for a while, along with a rather nasty
relaying vulnerability in Netscape's distributed antirelay settings.

There are a bunch of fixes at http://www.tsc.com/~bobp/nms-no-relay.html

AB

Current thread:

Netscape Messaging Server RCPT TO vul. Nobuo Miwa (Oct 28)
- Re: Netscape Messaging Server RCPT TO vul. Alan Brown (Oct 28)
  - Re: Netscape Messaging Server RCPT TO vul. Nobuo Miwa (Oct 29)