#9 webmail: vmailmgr authentication

open
nobody
None
5
2003-08-08
2003-08-08
Dominik Pospisil
No

User is not authenticated in the case the password
starts with a digit.

Cause: omail.pl, line 702

my $command = 'echo -e "'. $domainname .'\000'.
$username .'\000'. $password .'\000" | ' .$vauthenticate;

Part of the user's password is appended to \000
sequence and treated as a special character.

Possible workaround: use another way to feed vmailmgr's
vauthenticate command.

- Dominik

Discussion