Hi,
somebody has hacked into my server (RedHat 7.0, x86) using the pop3d buffer overflow, and now I'm trying to fix it.
Up to now (after the hack), the ipop3d damon has been segfaulting whenever somebody wanted to access pop3 mail.
So I've installed the newest imap rpm (with ipop3d) but ipop3d is always giving a segfault when entered the right user name and password.
I have done strace of ipop3d running as root and the end of it looks like this:

uname({sys="Linux", node="bobesz.com", ...}) = 0
open("/var/spool/mail/zbychu900.lock.993073699.4069.bobesz.com", O_WRONLY|O_CREAT|O_EXCL, 0666) = -1 EACCES (Permission denied)
open("/var/spool/mail/zbychu900", O_RDWR) = 4
lstat("/var/spool/mail/zbychu900.lock", 0xbfffcc10) = -1 ENOENT (No such file or directory)
getpid() = 4069
time(NULL) = 993073699
uname({sys="Linux", node="bobesz.com", ...}) = 0
open("/var/spool/mail/zbychu900.lock.993073699.4069.bobesz.com", O_WRONLY|O_CREAT|O_EXCL, 0666) = -1 EACCES (Permission denied)
stat("", <unfinished ...>
+++ killed by SIGSEGV +++


As root I can touch all the files mentioned, so it is not a problem with user privileges. What else I forgot?