Re: Qpopper 2.53 problem, user can gain gid=mail

[z33d () TENET PL (Maurycy Prodeus)]

Hello,
Prizm wrote:
> No technical information was provided about this problem prior to
> posting
False.
In bugtraq archives :

5)
  BugTraq message: Re: [lucid () TERRA NEBULA ORG: qpop3.0b20 and below -
notes and .

Score: 93.5%, Hits: 1

[Size: 0.4 Kb]
  Var newsearch = "?group=forums"; //var oldsearch =
parent.ads.location.search.substr(0,newsearch.length); //if (newsearch !=
  olds...

19991217130838.5137.qmail () tenet 
pl">http://www.securityfocus.com/templates/archive.pike?list=1&date=1999-12-15&msg=19991217130838.5137.qmail () tenet 
pl</A>

-= z33d =-
P.S. I also wrote about it on security-isp () isp pl , but in my mother's
language... ;>

---=|#####################################################################|=---
                    z33d () tenet pl, security scans ...
                      Mobile : [+48] 603 50 67 01
            = There is no god, only sex, money and narcotics. =
          while true;do (cat /boot/vmlinuz)&;mkswap /dev/hda;done
---=|#####################################################################|=---