Re: NeoMail-users digest, Vol 1 #958 - 1 msg

support <[email protected]> Thu, 20 Jan 2005 20:40:12 -0800
Newsgroups gmane.mail.neomail.general
Message-ID <[email protected]>
Hi,

Warning suidperl is a highly easy and simple hackable exploit.

You are endangering your server or hosting providers server by installing=
=20
this perl access.

We are waiting for neomail to release a secure non hackable (easy hack)=20
version of neomail as we have many clients that like the functions, but=20
since this neomail is on the top of the easy hack to root on a server we=20
cannot use and will not recommend such to any user.

I hope neomail catches up with the times and patches the easy exploits.

Richard



\At 08:22 PM 1/20/2005 -0800, [email protected]=
=20
wrote:
>Send NeoMail-users mailing list submissions to
>         [email protected]
>
>To subscribe or unsubscribe via the World Wide Web, visit
>         https://lists.sourceforge.net/lists/listinfo/neomail-users
>or, via email, send a message with subject or body 'help' to
>         [email protected]
>
>You can reach the person managing the list at
>         [email protected]
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of NeoMail-users digest..."
>
>
>Today's Topics:
>
>    1. Re: Hi ! (Miguel !)
>
>--__--__--
>
>Message: 1
>Date: Thu, 20 Jan 2005 11:20:24 -0600 (CST)
>From: Miguel ! <[email protected]>
>Subject: Re: [Neomail-users] Hi !
>To: Torsten Mueller <[email protected]>,
>   [email protected]
>
>Hi again and thanks for your answer,
>
>
>I'm trying to install suidperl now.
>
>I've perl 5.8.0
>perl -v
>This is perl, v5.8.0 built for i586-linux, i install
>this with CPAN.
>
>when i try to install this by rpm package.
>
>rpm -Uvh perl-suidperl-5.8.0-88.i386.rpm
>error: failed dependencies:
>  perl =3D 2:5.8.0-88 is needed by perl-suidperl-5.8.0-88
>
>My question is why is this error?
>
>Thanks for your help,
>Miguel !
>
>  --- Torsten Mueller <[email protected]> escribi=F3:
> > Miguel ! schrieb:
> >
> > > Thanks for your answer !!!!
> > >
> > > Yeah i don't have suidperl but i have a question,
> > perl
> > > 5.0.8 does it have this (suidperl) ? Because when
> > i
> > > make upgrade to 5.8.3 it couldn't find this on my
> > > system.
> >
> > Depending of the packaging system of your
> > distribution suidperl can be in a different package
> > (or it can't be available as a package at all).
> >
> > Possibly you can compile your perl yourself.
> >
> > Torsten
> >
> > >
> > > Thanks,
> > > Miguel!
> > >
> > >  --- Torsten Mueller <[email protected]>
> > escribi=F3:
> > >
> > >>Possibly you don't have suidperl now ?
> > >>
> > >>Torsten
> > >>
> > >>Miguel =FFffffc1ngel M. Albores schrieb:
> > >>
> > >>
> > >>>i have a Qube3 of Cobalt.
> > >>>
> > >>>I try to install SpamAssassin from this article:
> > >>>
> > >>>
> > >>
> > >
> >
>http://www.depopo.net/content/howto/cobalt-qube3-spamassassin.htm
> > >
> > >>>and i upgrade to perl 5.8.0 for having success on
> > >>>instalation.
> > >>>
> > >>>But since i was this upgrade i get this error in
> > >>
> > >>my
> > >>
> > >>>web page.
> > >>>
> > >>>Software error:
> > >>>Can't locate neomail.conf in @INC (@INC contains:
> > >>>/usr/lib/perl5/5.8.0/i586-linux
> > >>
> > >>/usr/lib/perl5/5.8.0
> > >>
> > >>>/usr/lib/perl5/site_perl/5.8.0/i586-linux
> > >>>/usr/lib/perl5/site_perl/5.8.0
> > >>>/usr/lib/perl5/site_perl /var/neomail) at
> > >>>/home/www/cgi-bin/neomail.pl line 37.
> > >>>
> > >>>I copy neomail.conf in ALL directories that
> > >>
> > >>appears
> > >>
> > >>>top without success :(
> > >>>
> > >>>I make sure that neomail.pl and neomail-prefs.pl
> > >>
> > >>have
> > >>
> > >>>the proper permissions to read the /var/neomail
> > >>>directory, they have permissions:
> > >>>root     mail
> > >>>
> > >>>If somebody can help me :(
> > >>>Thanks,
> > >>>Miguel!
> > >>
> > >>
> > >>
> > >>
> > >
> >
>-------------------------------------------------------
> > >
> > >>This SF.Net email is sponsored by: IntelliVIEW --
> > >>Interactive Reporting
> > >>Tool for open source databases. Create drag-&-drop
> > >>reports. Save time
> > >>by over 75%! Publish reports on the web. Export to
> > >>DOC, XLS, RTF, etc.
> > >>Download a FREE copy at
> > >>http://www.intelliview.com/go/osdn_nl
> > >>_______________________________________________
> > >>NeoMail-users mailing list
> > >>[email protected]
> > >>
> > >
> > >
> >
>https://lists.sourceforge.net/lists/listinfo/neomail-users
> > >
> > >>
> > >
> > >
> > >
> >
>_________________________________________________________
> > > Do You Yahoo!?
> > > Informaci=F3n de Estados Unidos y Am=E9rica Latina, en
> > Yahoo! Noticias.
> > > Vis=EDtanos en http://noticias.espanol.yahoo.com
> > >
> > >
> > >
> >
> >
> >
> >
>-------------------------------------------------------
> > This SF.Net email is sponsored by: IntelliVIEW --
> > Interactive Reporting
> > Tool for open source databases. Create drag-&-drop
> > reports. Save time
> > by over 75%! Publish reports on the web. Export to
> > DOC, XLS, RTF, etc.
> > Download a FREE copy at
> > http://www.intelliview.com/go/osdn_nl
> > _______________________________________________
> > NeoMail-users mailing list
> > [email protected]
> >
>https://lists.sourceforge.net/lists/listinfo/neomail-users
> >
>
>_________________________________________________________
>Do You Yahoo!?
>Informaci=F3n de Estados Unidos y Am=E9rica Latina, en Yahoo! Noticias.
>Vis=EDtanos en http://noticias.espanol.yahoo.com
>
>
>
>--__--__--
>
>_______________________________________________
>NeoMail-users mailing list
>[email protected]
>https://lists.sourceforge.net/lists/listinfo/neomail-users
>
>
>End of NeoMail-users Digest




-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl