Skip to main content
Add as a preferred source on Google


Yahoo Fixing Zimbra Bug, Integrating with Exchange

  • By Jabulani Leffall
  • 10/06/08

Web-search advertising giant Yahoo plans to resolve a password security vulnerability identified in late September in its Zimbra open source e-mail and collaboration software. On Wednesday, a Yahoo spokesperson stated by e-mail that the problem will be addressed in a few weeks' time.

Canadian computer programmer Holden Karau spotted the security problem while participating in Yahoo's University Hack Day. He found that passwords used to log onto Yahoo's e-mail service through the Zimbra client were exposed as clear text, rather than encrypted, as described on his blog.

The Yahoo spokesperson explained that security upgrades and other changes are afoot for the next beta release of Zimbra and "things will be in place in the next few weeks before the service is launched out of beta."

The security fix comes on top of news that Zimbra, which features an AJAX-based client, has achieved compatibility with formats used in other mail programs. The product is now compatible with e-mail, meeting apps, calendars and contact lists used in Microsoft Exchange and Apple Mail, according to a Yahoo announcement issued on Tuesday.

The Zimbra Collaboration Suite now has an "open extension framework" that works with Microsoft Exchange 2003. Yahoo is leaving it up to the marketplace to develop similar mail server extensions, such as for IBM's Lotus Domino or Novell's GroupWise.

Yahoo purchased Zimbra Inc., a San Mateo, Calif.-based startup, in September. Zimbra's software consists of client and server side components, with a free open source version that is currently in the beta testing phase. Yahoo also has a commercially supported edition called Zimbra Network, which has some proprietary code.

About the Author

Jabulani Leffall is a business consultant and an award-winning journalist whose work has appeared in the Financial Times of London, Investor's Business Daily, The Economist and CFO Magazine, among others. He consulted for Deloitte & Touche LLP and was a business and world affairs commentator on ABC and CNN.

Featured

  • Robot typing on fluorescent keyboard

    The Wrong Battle: Why Your Institution's AI Policy Is Probably Solving the Wrong Problem

    The conversation on most campuses has become consumed with detection: How do we catch students using AI when they shouldn't? The impulse to protect academic integrity is legitimate, but the detection-first approach has a fatal flaw.

  • abstract smartphone translucent screen displaying AI interface

    Apple Introduces Redesigned Siri AI

    At its recent Worldwide Developers Conference, Apple introduced Siri AI, a redesigned version of its voice assistant that Apple describes in its own announcement as "a profoundly more capable and personal assistant." The update is intended to make Siri more conversational, more context-aware, and more useful across iPhone, iPad, Mac, Apple Watch, and Vision Pro.

  • abstract glowing circuit patterns

    Microsoft Reduces Copilot Integrations in Windows 11

    Microsoft is dialing back its aggressive Copilot push in Windows 11, promising a sweeping quality overhaul that puts performance and reliability ahead of AI feature expansion .

  • abstract data flow

    Google Intros New Gemini Enterprise Agent Platform

    Google Cloud has announced a new platform for building and managing enterprise AI agents, as the company seeks to turn its Gemini models and Vertex AI tooling into a broader system for automating business workflows.