Firewall Wizards mailing list archives

Re: Simple demo


From: Rik Farrow <rik () spirit com>
Date: Mon, 31 Aug 1998 17:30:59 -0700 (MST)

nuqneH wrote:

Hmm, did Gauntlet 3.2 have IMAP proxy as AG? AFAIR it was circuit gateway
there..

Good point.  Wrong exploit, although right target.  See CA-97.09,
which involved the imapd, and remote root access via pop3 and imap.
Gauntlet v3.2 has a pop3 proxy, not an imap proxy (according to the
docs at least).  I did test this, but found the wrong exploit...

POP3 uses port 110.

Rik



Current thread: