similar to: Security hole with mboxes

zlib plugin allows opening gzipped mboxes as read-only mailboxes. However when using it, the mailbox name checks are bypassed so it's possible to open for example "../otheruser/somefile.gz". Only valid gzipped mbox files can be opened, and only if their name ends with ".gz". You can fix this by upgrading to v1.0.rc29 (available soon) or with this patch:

zlib plugin allows opening gzipped mboxes as read-only mailboxes. However when using it, the mailbox name checks are bypassed so it's possible to open for example "../otheruser/somefile.gz". Only valid gzipped mbox files can be opened, and only if their name ends with ".gz". You can fix this by upgrading to v1.0.rc29 (available soon) or with this patch:

I'm in the position where I'd like to offer IMAP access to a collection of email accounts which are stored in a very odd manner. Files are stored as: /blah/$dd-$mm-$yy/$domain/1234/1234 For example: /reject/12-3-2009/cvsrepository.org/35199/35199639 There is a single file for each mail, which I guess technically probably counts as an mbox folder, but only just. I

I am running version 3.2 of ferret and would like to upgrade to a more current version. will my existing 3.2 index files be compatible? thanks, AK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://rubyforge.org/pipermail/ferret-talk/attachments/20070910/742890f2/attachment.html

On Sun, August 6, 2006 7:57 pm, Timo Sirainen <tss at iki.fi> said: > On Wed, 2006-07-05 at 12:04 -0400, Bill Boebel wrote: >> On Sun, June 11, 2006 1:51 pm, Timo Sirainen <tss at iki.fi> said: >> > On Mon, 2006-05-08 at 22:03 -0400, Bill Boebel wrote: >> >I'm not sure if this is a bug or just an undesirable feature, but when I >> >have our

Good Morning, Is it possible to use the R program for a CFA with dichotomous data? Thank you, Kathleen Kathleen Kemp, M.A. Doctoral Clinical Psychology Student, Concentration: Forensic Psychology Drexel University Philadelphia, PA 19104 kk354@drexel.edu [[alternative HTML version deleted]]

Hi, Is it possible to have an array as the output of a custom fact? And then to pass it into a template in Puppet? I currently have a fact that looks like this: Facter.add("exports") do setcode do case Facter.hostname when (/thishost/i): [ "/local", "/local2" ] end end end & a template like this: <%

http://bugzilla.mindrot.org/show_bug.cgi?id=954 Summary: configure w/PAM & tcp_wrapper crashes on Irix 6.5 Product: Portable OpenSSH Version: 3.8.1p1 Platform: MIPS OS/Version: IRIX Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-bugs at mindrot.org

Dear list, As a recent dovecot addict, I'm a bit puzzled by the sheer amount of patches available. I have not seen the history of these patches and I could not find a README explainng the patches. Are all these personal wishes/nice to have things or are they (to be) incorporated in dovecot-final? I use rpmbuild to create new rpms from the latest tarball but in that process still several

I'd like to put forward the following patch for dovecot-sieve. Essentially this just merges in some changes made in CMU sieve 2.3.8 and as such brings the behaviour more in line with RFC 3834 "Recommendations for Automatic Responses to Electronic Mail": - fixes erroneous sender "-request" substring match - checks for existence of a selection of list-* headers -

Hi, I would like to be able to count a sequence of numbers. For example, given a vector of the following integers (1,1,1,2,2,2,2,3,3,3,3,3,3,1,1,1,1, 3,3) the function would return (3, 4, 6, 4,2) Does anyone have any cool ideas to solve this? Any help appreciated. Regards, Sam. [[alternative HTML version deleted]]

Hi, I''m gradually moving my site''s config over to Puppet (still in the testing phases at the moment!). Is there any way of getting/referring to a host''s IP address? I want to set up iptables via Puppet, & can use a template but need to get the IP address into the template somehow. I''m getting my node definitions (& thus classes) from LDAP. I

Using the latest dovecot-stable (20050213) with pine, I get an empty "from" header in my e-mails. This doesn't happen with 1.0.59-test, nor did it happen with the first dovecot-stable (20050131). A partial connection log is below: 1.0-test59: IMAP DEBUG 15:23:32 2/13: 00000007 FETCH 1:41 (UID ENVELOPE BODY.PEEK[HEADER.FIELDS (Newsgroups Content-MD5 Content-Disposition

Hi, I have been using R for a few months now and I am confident that the language has everything I will need to complete my PhD. I can create functions, script files and packages, but I would like to write my programs more efficiently (maybe using OO). Can anyone recommend a good book on the "art" of good R programming? Kind Regards, Sam.

On Sun, June 11, 2006 1:51 pm, Timo Sirainen <tss at iki.fi> said: > On Mon, 2006-05-08 at 22:03 -0400, Bill Boebel wrote: >I'm not sure if this is a bug or just an undesirable feature, but when I >have our namespace configured to match Courier's "INBOX." functionality, >Dovecot forces me to also define a default namespace (with no prefix). >Without the

On Sun, June 11, 2006 1:52 pm, Timo Sirainen <tss at iki.fi> said: > On Thu, 2006-04-20 at 20:02 -0400, Bill Boebel wrote: >The maildir quota plugin doesn't appear to be including the INBOX in the quota > calculation that is reported by GETQUOTAROOT. > >I took a look at the code and it appears that in this file > "src/plugins/quota/quota-maildir.c", the

In Debian 1.1, the optional DOSEMU package installs /usr/sbin/dos setuid root. This is a serious security hole which can be exploited to gain access to any file on the system. Package: dosemu Version: 0.64.0.2-9 ------- start of cut text -------------- $ cat /etc/debian_version 1.1 $ id uid=xxxx(quinlan) gid=xxxx(quinlan) groups=xxxx(quinlan),20(dialout),24(cdrom) [quinlan:~]$ ls -al

Hi, Is there a function in R that lets one represent an integer in binary format for a given number of bits? So an example would be.... > binary.function(num=5, num.of.bits=8) > "00000101" Or, is this something I have to write myself? Any help would be appreciated. Cheers, Sam.

Hi, I'm a user of Mutt, and before moving to Thunderbird I'm trying to share mboxes between them. To do this, I installed Dovecot to create an IMAP server in my local machine, to serve mutt mboxes to be read by Thunderbird. So far, I can read my inbox from /var/mail/%u, but in mutt, I have many folders in ~/mail, like 2010-mails, 2011-mails, mailing-list-x, mailing-list-y, and so on. How

Hello! We drive mboxes and maildirs and the dovecot-server is running very well and everthing is fine, but I get the following warning in the dovecot-lda-errors.log when a mail is delivered to a mbox. Jan 10 16:29:24 lda(archiv at bitcorner.de): Warning: quota: Namespace '' is not Maildir, skipping for Maildir++ quota This is what I defined in the dovecot.conf: mail_home =