Stormbringer
01.03.05, 11:04
Zwar schon am 14. Februar veröffentlicht, aber lieber spät als nie ...
Homesite: http://asg.web.cmu.edu/cyrus/
Version verfügbar unter: ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-imapd-2.2.12.tar.gz
Aus dem Changelog (doc/text/changes):
Changes to the Cyrus IMAP Server since 2.2.10
* Fix possible single byte overflow in mailbox handling code.
* Fix possible single byte overflows in the imapd annotate extension.
* Fix stack buffer overflows in fetchnews (exploitable by peer news
server), backend (exploitable by admin), and in imapd (exploitable
by users though only on platforms where a filename may be larger
than a mailbox name).
Was ist cyrus-imap (aus /doc/text/index):
Cyrus IMAP Server, version 2.2
IMAP (Internet Message Access Protocol) is an Internet standards-track
protocol for accessing messages (mail, bboards, news, etc). The Cyrus
IMAP server differs from other IMAP server implementations in that it
is generally intended to be run on sealed servers, where normal users
are not permitted to log in. The mailbox database is stored in parts of
the filesystem that are private to the Cyrus IMAP system. All user
access to messages is through the IMAP, POP3, KPOP or NNTP protocols.
The private mailbox database design gives the server large advantages
in efficiency, scalability, and administratability. Multiple concurrent
read/write connections to the same mailbox are permitted. The server
supports access control lists on mailboxes and storage quotas on
mailbox hierarchies.
The Cyrus project is the implementation of IMAP servers by the Carnegie
Mellon University Computing Services Department. Over the next few
months, we will be releasing components of this server, which will
provide better mail security and easier mail administration.
Gruß
Homesite: http://asg.web.cmu.edu/cyrus/
Version verfügbar unter: ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/cyrus-imapd-2.2.12.tar.gz
Aus dem Changelog (doc/text/changes):
Changes to the Cyrus IMAP Server since 2.2.10
* Fix possible single byte overflow in mailbox handling code.
* Fix possible single byte overflows in the imapd annotate extension.
* Fix stack buffer overflows in fetchnews (exploitable by peer news
server), backend (exploitable by admin), and in imapd (exploitable
by users though only on platforms where a filename may be larger
than a mailbox name).
Was ist cyrus-imap (aus /doc/text/index):
Cyrus IMAP Server, version 2.2
IMAP (Internet Message Access Protocol) is an Internet standards-track
protocol for accessing messages (mail, bboards, news, etc). The Cyrus
IMAP server differs from other IMAP server implementations in that it
is generally intended to be run on sealed servers, where normal users
are not permitted to log in. The mailbox database is stored in parts of
the filesystem that are private to the Cyrus IMAP system. All user
access to messages is through the IMAP, POP3, KPOP or NNTP protocols.
The private mailbox database design gives the server large advantages
in efficiency, scalability, and administratability. Multiple concurrent
read/write connections to the same mailbox are permitted. The server
supports access control lists on mailboxes and storage quotas on
mailbox hierarchies.
The Cyrus project is the implementation of IMAP servers by the Carnegie
Mellon University Computing Services Department. Over the next few
months, we will be releasing components of this server, which will
provide better mail security and easier mail administration.
Gruß