SerialPOP DoS

[philip () EINET BG (Philip Stoev)]

Hello,

maybe this is nothing new, but anyway:

Certain versions of SerialPOP produce a nice Segmentation Fault if the user
specifies a POP/SMTP host name that is longer than 128 characters. This is
caused by a buffer overflow in a function which generates log output. I
know some variants have this fixed but others seem to be vulnerable.

 - - - - - - - - - - - - - - - - - - - - - - - - - - - -
| | If you will be taking the TOEFL or the SAT, check | |
| |        out http://studywiz.hypermart.net/         | |
 - - - - - - - - - - - - - - - - - - - - - - - - - - - -

 This message was sent by Philip Stoev (philip () einet bg)
 tel: (359 2) 715949, 9549488 fax: (359 2) 544669