You are not logged in.

#1 2003-01-05 17:16:03

ody
Member
From: Manchester, UK
Registered: 2002-08-12
Posts: 212
Website

Fetchmail vulnerability

Please upgrade to latest version or above: fetchmail-6.2.0-1

Offline

#2 2003-01-05 19:08:59

scottro
Member
From: NYC
Registered: 2002-10-11
Posts: 452
Website

Re: Fetchmail vulnerability

BTW, there's another program called getmail (I just started playing with it recently) that is supopsedly more stable. One thing I have found is that while I have trouble running fetchmail as daemon on FreeBSD (unless I'm using sendmail or postfix, eventually, it starts finding my mailbox in use, and stops working--only happens in FreeBSD, not Linux) getmail doesn't have that issue.

The downside for me is that you can't run it as a daemon--you have to either script it or run it as a cronjob.  For my situation, that's a bit of a nuisance, but it's a pretty nice program anyway.

I'm only using it on FreeBSD so far, but may play with it on my Arch workstation tomorrow.

Scott

Offline

#3 2003-01-05 20:37:44

ody
Member
From: Manchester, UK
Registered: 2002-08-12
Posts: 212
Website

Re: Fetchmail vulnerability

let me know how it goes wink

Offline

#4 2003-01-06 01:32:55

scottro
Member
From: NYC
Registered: 2002-10-11
Posts: 452
Website

Re: Fetchmail vulnerability

Will do--however, I don't know enough about security to judge if it's more or less vulnerable than fetchmail.

Scott

Offline

#5 2003-01-06 13:18:47

scottro
Member
From: NYC
Registered: 2002-10-11
Posts: 452
Website

Re: Fetchmail vulnerability

Ok, I've installed it and it seems to run quite well. A little more configuration than fetchmail (or maybe I'm just used to fetchmail--the general consensus is that getmail is easier to configure) but I'll put up a guide for lamers like myself shortly.

As for security--judging from his page where he almost gleefully mentions various vulnerabilities found in fetchmail, it's possibly secure.

Making a package for it is a bit beyond my feeble skills as most of the directory has to be copied over to user lib.


The url is http://www.qcc.sk.ca/~charlesc/software/getmail-2.0/

Hope this is of use.

Scott

Offline

Board footer

Powered by FluxBB