Roaring Penguin fixes for "Bypassing SMTP Content Protection with a Flick of a Button"

From: David F. Skoll (dfs@roaringpenguin.com)
Date: 09/12/02


Date: Thu, 12 Sep 2002 13:06:06 -0400 (EDT)
From: "David F. Skoll" <dfs@roaringpenguin.com>
To: bugtraq@securityfocus.com


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello,

We at Roaring Penguin Software Inc. have updated our products to deal
with the vulnerability at http://online.securityfocus.com/archive/1/291514

MIMEDefang: We have released version 2.21 of MIMEDefang at
http://www.roaringpenguin.com/mimedefang/ The default filter
blocks message/partial types.

CanIt: We have released version 1.2-F17 of our commercial CanIt
anti-spam solution. This release is based on MIMEDefang 2.21.

MIME-Tools: We have updated our patched version of MIME-Tools at
http://www.roaringpenguin.com/mimedefang/MIME-tools-5.411a-RP-Patched.tar.gz
MIME-Tools is a Perl module for parsing MIME messages. The patched
version now can descend into message/partial as well as message/rfc822
attachments. Our patched version also fixes various other vulnerabilities
in the official package (see http://online.securityfocus.com/archive/1/275282)

Regards,

David.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9gMmHxu9pkTSrlboRAry3AJ4jE+4XurEOIqPtFt8nxRP6/xE2lQCfdAOw
QZHmeIlayd8mkMeKTpE0tDU=
=M+gb
-----END PGP SIGNATURE-----