We are pleased to announce the release of Cyrus IMAPd 2.3.18. This is a security update to the old stable series, containing just a single fix to Secunia SA46093. Stefan Cornelius from Secunia Research discovered that anonymous users can appear to be authenticated as any useri to nttpd - by just failing to send any PASS command.
You can download via HTTP or FTP: http://cyrusimap.org/releases/cyrus-imapd-2.3.18.tar.gz ftp://ftp.cyrusimap.org/cyrus-imapd/cyrus-imapd-2.3.18.tar.gz Regards, Bron. ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
