Re[3]: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-12 Thread Sanford Whiteman
Confirming my take on the situation, Kevin just posted this to IMail_Forum: > Thanks for your feedback and yes, Safari is a bit cantankerous. > Firefox/Mac has been okay but not Safari. > > It turns out we just fixed (in the last few business days) the last known > issue with Safari.

Re[2]: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-12 Thread Sanford Whiteman
> My reading of Kevin Gills' message on 9/11 was that most everything but > rich text editing now works, and that rich text support will be in the > next release. Not my reading... >>Yes, we have added Safari support (all but the rich text editor) in >>the last sprint. This will be available in

Re: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-12 Thread Matt
My reading of Kevin Gills' message on 9/11 was that most everything but rich text editing now works, and that rich text support will be in the next release.  Naturally I haven't tested it, and it definitely needs testing before committing Mac users to this interface.  See below: Hi All, Ye

Re[2]: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-12 Thread Sanford Whiteman
> The SMTP engine is largely unchanged since 8.0 was released. Geez, man, that is completely untrue. If that's your premise, sorry, that debate is on your planet, I'm not going there > Safari support is in 2001.1 for the first time. Then it's pretty strange how there's not a single post t

Re: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-12 Thread Matt
The SMTP engine is largely unchanged since 8.0 was released.  2006 deals primarily with webmail thus far, and these other services have only been tweaked and not rewritten.  I assume that all of 8.x is vulnerable regardless of the source of the information on the list which was not disputed.  I

Re: Re[2]: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-12 Thread Mike N
The proof-of-concepts which have been tested on multiple versions also list a "not vulnerable" category if other versions have been tested. I get the feeling that Ipswitch has washed its hands of the previous version that is more than 90 days old. They take a passive approach to security;

Re[2]: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-11 Thread Sanford Whiteman
> On the IMail list they indicated that IMail 8.x is also affected and > possibly older versions as well. A non-Ipswitch poster said that an anonymous tech indicated so. We all know that if that was a first-level tech... their word is not exactly gold. True, the IMail product manager chimed in to

Re: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-11 Thread Matt
ndrew.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gans, Günter (LDS) Sent: Monday, September 11, 2006 4:23 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Buffer overflow in Ipswitch products Hello,   at the Heise news t

RE: [Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-11 Thread Colbeck, Andrew
] On Behalf Of Gans, Günter (LDS)Sent: Monday, September 11, 2006 4:23 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Buffer overflow in Ipswitch products Hello,   at the Heise news ticker http://www.heise-security.co.uk/news/77889 an IMail-security-problem was

[Declude.JunkMail] Buffer overflow in Ipswitch products

2006-09-11 Thread LDS
Hello,   at the Heise news ticker http://www.heise-security.co.uk/news/77889 an IMail-security-problem was posted. Just new versions seem to be involved. We are wondering whether the old IMail version we use (7.15) is affected by this problem, too.   Best regards, Guenter Gans LDS NRW - German