3 ms·
There have been remote code execution exploits in mail servers before, Exim most recently. There probably are more hiding somewhere in one of the many layers th
by ashitlerferad 10y ago
There have been remote code execution exploits in mail servers before, Exim most recently. There probably are more hiding somewhere in one of the many layers that are needed for modern email servers.
- rlpb 10y agoThat isn't difficult to manage though, unless you consider running any server to be insecure. Use your distribution's MTA package and turn on automatic security updates. Done.
- AstralStorm 10y agoUnless they are too slow, then you get to pick up the pieces. Since a server is a much juicier and visible target than any client, expect attacks.
- zAy0LfpBZLC8mAC 10y ago> Since a server is a much juicier and visible target than any client, expect attacks. Why do you think that? Isn't a web browser that has access to your gmail inbox just as juicy as your self-hosted imap server? I don't really see why a "server" would somehow be inherently a more interesting target. Google's servers, sure, they give you acess to billions of mailboxes, but your own private email server?
- euyyn 10y agoI would presume the moment an adversary gains control of the server, his first order of business is to disable things like that.
- flukus 10y agoHow is that different from any other type of server?
- upofadown 10y agoAFAIKT, "recently" in this case is 2012. There was something in 2014 but it was for a non-default experimental feature.