Re: Qpopper 2.53 remote problem, user can gain gid=mail (fwd)

[listy-dyskusyjne Krzysztof Dabrowski]

>The 3.x series has been having *tons* of security problems, including
>stuff that was previously fixed in 2.x.  I really don't trust it.

There is realy no point in using qpopper. I have used it in isp enviroment 
and i can say that it sucks.
It doesn't do any mailbox locking, it just copies the whole thing to temp 
dir back and forth. this kills the performace. (id 3.x better?).

You have a broad choice:

a) qmail-pop3d - maildir only, lightweight, good
b) cucipop - this is what i use at the moment, mailbox only, fast, small
c) popa3d - by solar designer - small, fast, compatible, mailbox only 
http://freshmeat.net/redir/homepage/936847115/
d) solid pop3d - quality from Poland - like the above but with more 
features, maildir & mailbox

http://solidpop3d.pld.org.pl/

Why waste your time with lame servers like qpop when you have so broad 
choice of better alternatives.

Kris