I'd like to comfirm this bug still exists on etch-backports and is being actively exploited. Our Debian server running roundcube was comprimised yesterday though this bug.
____________________________________________________________________ RMCA Limited registered in England and Wales No. 5145853. Accounts & Tax Solutions Limited registered in England and Wales No. 5293501. This e-mail and any files transmitted with it are strictly confidential and intended solely for the person or organisation to whom it is addressed. It may contain privileged and confidential information and if you are not the intended recipient, you must not use, disclose, copy, distribute, print or take any action in reference to it. Any advice given by us is not intended to be relied upon without our subsequent written confirmation. Accordingly, we disclaim all responsibility and accept no liability for the consequences of any person acting without our subsequent written confirmation of advice contained herein. If you have received this e-mail in error, please notify us as soon as possible at s...@rm-ca.co.uk or telephone on +44(0)1442 891919 and delete this message from your system. Thank you. We take reasonable precautions to ensure our e-mail and attachments are virus free; however, we accept no responsibility for any virus transmitted by us.
