[Tickets #4371] Vpopmail driver for MD5 support

Wed Sep 27 03:54:27 PDT 2006

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=4371
-----------------------------------------------------------------------
 Ticket             | 4371
 Updated By         | Jan Schneider <jan at horde.org>
 Summary            | Vpopmail driver for MD5 support
 Queue              | Passwd
 Version            | 3.0
 Type               | Bug
-State              | Unconfirmed
+State              | Feedback
 Priority           | 2. Medium
 Owners             | 
-----------------------------------------------------------------------

Jan Schneider <jan at horde.org> (2006-09-27 03:54) wrote:

This patch doesn't make any sense to me. You are encrypting the provided
old password with the currently stored password as a salt. Since both
passwords have to be the same, the opposite would work as well, which is
happening if using comparePasswords().