Mail Enable POP Exploit, PLEase upgrade now!

[Traged1]

We were using mailenable standard 1.92 and started getting notices from DEP on our windows servers. DEP would close MEPOPS randomly. This was because of the new POP Exploit in Mail Enable.

Release 1.95 - 23rd Mar 2006
Fixed: Using an Access Control list for POP service could block incorrect IP addresses


Release 1.94 - 22nd Mar 2006
Fixed: Possible authentication exploits with POP service


Release 1.93 - 20th Mar 2006
Changed: For email addresses in a disabled domain, a temp error was being returned by SMTP, now it is a permanent error
Changed: Administration program will force valid domain for SMTP local (mail) domain setting
Fixed: Diagnostic output was showing Require PTR record was enabled when it wasn't
Fixed: Inboxes were being marked as dirty with POP service even if no changes were made
Fixed: If you add a group member using simple method in admin program, then add using advanced in another group, the first email address could be added as well
Fixed: Editing POP log paths directly in admin was not enabling the Apply button
Fixed: Activity Monitor may not show logs if Debug and Activity logs for a service weren't in the same path
Fixed: Possible authentication exploits with POP service

Upgrade your copy now: http://www.mailenable.com/download.asp

Make sure that during the install you chose the option to preserve data and backup.

 

[matija]

thanks for heads-up

 

[chuck.boyer]

Have any of you found any problems with using 1.95 with Plesk 7.5? Was the upgrade easy?

Thanks.
Chuck

 

[Traged1]

Nope, we have not noticed any problems running the new version, and the upgrade was smooth. Just make sure that you preserve your existing data during the upgrade.