diff options
| author | kris <kris@FreeBSD.org> | 2000-04-24 06:06:25 +0800 |
|---|---|---|
| committer | kris <kris@FreeBSD.org> | 2000-04-24 06:06:25 +0800 |
| commit | 3dd5ac37faf44b714cf27165c6d74f1a75ff64a3 (patch) | |
| tree | 7fdb2fd325f7f28355832b89c8b47c3d35cebf3c /mail | |
| parent | bd45e970023b874c1a52a3b41c6de410a4fbbbad (diff) | |
| download | freebsd-ports-gnome-3dd5ac37faf44b714cf27165c6d74f1a75ff64a3.tar.gz freebsd-ports-gnome-3dd5ac37faf44b714cf27165c6d74f1a75ff64a3.tar.zst freebsd-ports-gnome-3dd5ac37faf44b714cf27165c6d74f1a75ff64a3.zip | |
Note a local mailbox DoS vulnerability, advisory forthcoming.
Diffstat (limited to 'mail')
| -rw-r--r-- | mail/imap-uw/pkg-install | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/mail/imap-uw/pkg-install b/mail/imap-uw/pkg-install index 05200dccd71d..6257ca0fce8f 100644 --- a/mail/imap-uw/pkg-install +++ b/mail/imap-uw/pkg-install @@ -5,7 +5,7 @@ case $2 in POST-INSTALL) ;; PRE-INSTALL) - if dialog --yesno "This port is not safe to use on a system which does not\nprovide shell access to users who can retrieve mail via IMAP.\nimapd contains buffer overflows which a user can exploit\nafter they have logged into imap to get access to their\naccount on the machine. If your imap users have shell access\nanyway, this is not a significant vulnerability.\n\nDo you wish to proceed with the build?" 13 65 < ${TTY} >${TTY} 2>&1; then + if dialog --yesno "This port is not safe to use on a system which does not\nprovide shell access to users who can retrieve mail via IMAP.\nimapd contains buffer overflows which a user can exploit\nafter they have logged into imap to get access to their\naccount on the machine. If your imap users have shell access\nanyway, this is not a significant vulnerability.\n\nThere is also a vulnerability wherein local users can prevent\narbitrary POP2/3 mailboxes from being opened, and force IMAP\nmailboxes to only open read-only.\n\nDo you wish to proceed with the build?" 16 65 < ${TTY} >${TTY} 2>&1; then exit 0 else exit 1 |