Debian 3.0 DSA-373-1 Critical: Autorespond Remote Exploit Alert

Christian Jaeger discovered a buffer overflow in autorespond, an email
autoresponder used with qmail. This vulnerability could potentially
be exploited by a remote attacker to gain the privileges of a user who
has configured qmail to forward messages to autorespond. This
vulnerability is currently not believed to be exploitable due to
incidental limits on the length of the problematic input, but there
may be situations in which these limits do not apply.

For the stable distribution (woody) this problem has been fixed in
version 2.0.2-2woody1.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you update your autorespond package.

Upgrade Instructions
--------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected pa...