From owner-freebsd-current Sat Jun 27 19:41:22 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA11126 for freebsd-current-outgoing; Sat, 27 Jun 1998 19:41:22 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from ns1.seidata.com (ns1.seidata.com [208.10.211.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA11098; Sat, 27 Jun 1998 19:41:12 -0700 (PDT) (envelope-from mike@seidata.com) Received: from localhost (mike@localhost) by ns1.seidata.com (8.8.8/8.8.5) with SMTP id WAA17610; Sat, 27 Jun 1998 22:42:40 -0400 (EDT) Date: Sat, 27 Jun 1998 22:42:40 -0400 (EDT) From: Mike To: Taavi Talvik cc: Greg Lehey , Jason Godsey , isp@FreeBSD.ORG, current@FreeBSD.ORG Subject: Re: qpopper compromise (was: !!! FLASH TRAFFIC !!! QPOPPER REMOTE ROOT EXPLOIT (fwd)) In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, 28 Jun 1998, Taavi Talvik wrote: Well... I suppose this is applicable for any isp and I'm running current... so I'm posting to all original addrs. *ducks behind chair* To think that I'd almost deleted the initial '!!!...!!!' post as well thinking it was spam. ;) > Only thing, popper built with latest patches (incl. patch-ag) dies with > SIGSEGV on my box immediately when accessed.. Ditto... > This is on current approximately one month old. And ditto. No matter how many times you reboot/respawn it still dies with sig 11. Reverting to the old version restores functionality. This is with 3.0-980520-SNAP and the /usr/ports/mail/popper package from about 7-8pm today (27th). I had to dig for it (amongst a few thousand 'popper existed on sig 11' lines)... but I did also find the following: Jun 27 19:28:58 ns1 /usr/local/libexec/popper[5622]: Unable to obtain socket and address of client, err = 38 *shrug* -mike To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message