Mailbox vulnerable?

[Hongwei Li]

I installed the new pine 4.60.  When I try a test account's pine, the
warning message is gone.  Thanks!

However, the system mail log (not message log) shows warning:

Jun 28 11:13:03 morpheus ipop3d[1183]: pop3 service init from 128.252.85.189
Jun 28 11:13:03 morpheus ipop3d[1183]: Mailbox vulnerable - directory
/var/spool/mail must have 1777 protection

after each pop3 user logs in (Outlook Express, etc.), but it seems no
warning message after squirrelmail user logs in.

Anything else is wrong? or should be changed. I have never touched the
pop3 service, but just set iptables and open the port for it.

Thanks!

Hongwei

> Leave the permissions as they are! Use the pine 4.60 RPM by Dag Wieers
> which is made for FC1 and FC2 and contains some patches to cover locking
> issues.
>
> http://dag.wieers.com/packages/pine/
>
> Alexander
>
>