OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: SMTP buffer overflow?
From: Ralf Hildebrandt (news-list.postfix.usersinnominate.de)
Date: Tue Jul 04 2000 - 04:00:00 CDT

On 4 Jul 2000 10:45:29 +0200, Gert-Jan Looy <gjsiemens.nl> wrote:

>While scanning our firewall with ISS following HIGH severity message
>came up:
>
>"SMTP HELO buffer overflow can crash or obtain access"
>
>(I'am running postfix 31121999PL8)
>
>Is this message to be taken serious?

No. It's a false positive.

>is there a patch available?

No, because there's nothing to fix. 

-- 
Ralf.Hildebrandtinnominate.de
                                                          innominate AG
                                                      networking people
fon: +49.30.308806-44 fax: -77  web: http://innominate.de  pgp: /pgp/rh