Menu

#1180 Backslash in password fails authentication

closed-fixed
None
5
2003-04-19
2003-04-09
Anonymous
No

When you have a backslash in your password, the
authentication with the IMAP-server doesn't succeed
and redirect.php gives you a 'unknown username or
incorrect password'.

It's already in the beginning of redirect.php that the
variable $secretkey doesn't contain the correct
password (but with double backslash).

Haven't done any further debugging/testing.

It is easy to reproduce: just set your password to
contain a backslash and let the fun begin.

Regards,

Geert van der Ploeg
squirrelmail_bug@geert.triple-it.nl

Discussion

  • Jonathan Angliss

    Logged In: YES
    user_id=620333

    I'm already looking into this... thanks for the report.

     
  • Jonathan Angliss

    • assigned_to: nobody --> jangliss
    • status: open --> open-accepted
     
  • Nobody/Anonymous

    Logged In: NO

    I'm a first time user of Squirrelmail & tried running ver 1.4 - in
    my set up it doesn't present any password to the IMAP
    server, irrespective of what is entered, and so only works if
    the user is configured with a blank password.

     
  • Jonathan Angliss

    Logged In: YES
    user_id=620333

    I believe that the bug you reported has been fixed in the CVS version. Please either grab a live CVS version or wait and grab an archive of the CVS from tomorrow or later (just to make sure it has the changes in it).

    If the bug does not exist after you update to the CVS version, please close this bug report.

     
  • Jonathan Angliss

    • status: open-accepted --> open-fixed
     
  • Jonathan Angliss

    • status: open-fixed --> closed-fixed
     

Log in to post a comment.