Bugtraq mailing list archives

Re: unsafe fgets() in qpopper


From: qpopper () QUALCOMM COM (Qpopper Support)
Date: Fri, 28 Apr 2000 20:03:03 -0700


This problem has been fixed in Qpopper 3.0.1b2, which is now available.

Note that the problem does not occur on Solaris systems (which use
Content-Length), nor  on systems which use mail or certain other
local delivery agents.  I was able to reproduce it on Linux using
mail.local.

Also, note that the patch supplied in the email message may not
function correctly and may cause messages to not be recognized.


Current thread: