Displaying 3 results from an estimated 3 matches for "lofasznehogyma".
2017 Feb 28
2
Dict protocol changes string
...7 and 2.2.28 goes even further
(2.2.25 was OK).
If a user specifies a password with a % in it, dovecot silently
truncates it.
So for example if I specify (just to check this simple example is also bad):
key passdb {
key = %w
format = json
}
and a user tries to log in with the password 'Lofasznehogyma%', dovecot
sends the following into the dict socket:
'Lshared/Lofasznehogyma'
According to user reports, other characters may also be affected.
Could you please fix this?
2017 Mar 13
0
Dict protocol changes string
...).
> If a user specifies a password with a % in it, dovecot silently
> truncates it.
> So for example if I specify (just to check this simple example is also
> bad):
> key passdb {
> key = %w
> format = json
> }
>
> and a user tries to log in with the password 'Lofasznehogyma%',
> dovecot sends the following into the dict socket:
> 'Lshared/Lofasznehogyma'
>
> According to user reports, other characters may also be affected.
>
> Could you please fix this?
Hi!
Can you try this?
https://github.com/dovecot/core/commit/000030feb7a30f193197f1...
2016 Jul 29
2
Dict protocol changes string
Hi,
I use pass and userdb with dict protocol in a similar way:
key passdb {
key = passdb^MAuth-User: %u^MAuth-Pass: %w^MAuth-Protocol:
%s^MClient-IP: %r
format = json
}
(^M is an \r character, inserted with vi CTRL-v + enter)
Until 2.2.24 this has worked, but 2.2.25 seems to convert that ASCII 13
into an ASCII 1 and an "r".
Python printout from what I get with 2.2.25: