Re: [SM-DEVEL] [Fwd: squirrelmail: squirrelspell plugin check_me.mod.php bug]

[Robert B. <rb...@la...>]

--On Thursday, February 7, 2002 4:47 PM -0500 Konstantin Riabitsev 
<ic...@du...> wrote:

> On Thu, 2002-02-07 at 16:37, Robert Brewer wrote:
>> --On Tuesday, February 5, 2002 8:58 PM -0500 Konstantin Riabitsev
>> <ic...@du...> wrote:
>>
>> > On Tue, 2002-02-05 at 20:55, Magnus Stenman wrote:
>> >> I don't think I've seen this on squirrel-devel, it's from bugtraq.
>> >
>> > Old news. This is the same bug as was reported 2 weeks ago.
>> > Squirrelmail-1.2.4 fixes it.
>>
>> Really? The code listed on the exploit page
>> <http://spoor12.edup.tudelft.nl/skylined/?squirrelmail.html> appears to be
>> identical to the code in squirrelspell 0.3.1 that ships in SM-1.2.4. Are
>> you  saying that the exploit posted there doesn't work (I haven't tested
>> it on my  SM system)? Otherwise, it would seem to me that this bug is
>> _not_ fixed in  1.2.4.
>
> SquirrelMail-1.2.4 ships with SquirrelSpell-0.3.6.

Oops, my bad! The "INSTALL" text file at the top level of the squirrelspell 
directory still shows the version as 0.3.1.