[imp] horde php packages

Mike Cochrane mike@graftonhall.co.nz
Fri Nov 22 12:19:32 2002


A simple search of the code for Horde/IMP/Turba/Kronolith.... revelase no mail()
function being used. And to my knownledge this is correct. 

Hence no issue.

- Mike :-)

> ----- Message from jason@netops.firstcellular.com ---------
> 
> With the somewhat recent vulnerability to the php mail() function I've seen a
> bunch of vendors release security updates to there php packages.  I have not
> seen the horde project do this or has anything been said about it.  I saw
> this
> previouse post concerning this subject:
> http://marc.theaimsgroup.com/?l=imp&m=103724944628635&w=2 but nobody
> responded.
>  If anybody knows anything concerning this vulnerability and whether or not
> horde's php packages for Red Hat are vulnerable would you please respond to
> this.  Also is Horde or any of its components vulnerable to this
> vulnerability
> in php?
> 
> TIA
> Jason
> 
> 
> --
> IMP mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
> 
> 
> 
> ----- End message from jason@netops.firstcellular.com -----






More information about the imp mailing list