Fetchmail vulnerability

ody · 2003-01-05 17:16:03

Please upgrade to latest version or above: fetchmail-6.2.0-1

scottro · 2003-01-05 19:08:59

BTW, there's another program called getmail (I just started playing with it recently) that is supopsedly more stable. One thing I have found is that while I have trouble running fetchmail as daemon on FreeBSD (unless I'm using sendmail or postfix, eventually, it starts finding my mailbox in use, and stops working--only happens in FreeBSD, not Linux) getmail doesn't have that issue.

The downside for me is that you can't run it as a daemon--you have to either script it or run it as a cronjob. For my situation, that's a bit of a nuisance, but it's a pretty nice program anyway.

I'm only using it on FreeBSD so far, but may play with it on my Arch workstation tomorrow.

Scott

ody · 2003-01-05 20:37:44

let me know how it goes

scottro · 2003-01-06 01:32:55

Will do--however, I don't know enough about security to judge if it's more or less vulnerable than fetchmail.

Scott

scottro · 2003-01-06 13:18:47

Ok, I've installed it and it seems to run quite well. A little more configuration than fetchmail (or maybe I'm just used to fetchmail--the general consensus is that getmail is easier to configure) but I'll put up a guide for lamers like myself shortly.

As for security--judging from his page where he almost gleefully mentions various vulnerabilities found in fetchmail, it's possibly secure.

Making a package for it is a bit beyond my feeble skills as most of the directory has to be copied over to user lib.

The url is http://www.qcc.sk.ca/~charlesc/software/getmail-2.0/

Hope this is of use.

Scott

Arch Linux

#1 2003-01-05 17:16:03

Fetchmail vulnerability

#2 2003-01-05 19:08:59

Re: Fetchmail vulnerability

#3 2003-01-05 20:37:44

Re: Fetchmail vulnerability

#4 2003-01-06 01:32:55

Re: Fetchmail vulnerability

#5 2003-01-06 13:18:47

Re: Fetchmail vulnerability

Board footer