badlogins on imap server

Mark Borrie mark@gandalf.otago.ac.nz
Thu, 30 Aug 2001 17:24:09 +1200


I have just noticed that imp is generating a bogus imapd login for every 
(sucessful ?) login. The error that is being generated on the imapd server 
suggests that a login was attempted from an invalid user.

This user name seems to be 5 chars long and the last 2 chars are ^H and ^A.

Has anyone else noticed this or have any ideas as to the cause of it. I have 
been looking through the source but as I'm not that familiar with php I cant 
see where the login request actually gets sent. Any help appreciated.

I am running the following configuration

imp 2.2.6
horde 1.2.6
RedHat 7.1
php 4.0.4p11

Mark.

--
Mark Borrie
Systems Support Specialist and IT Security Officer,
Information Technology Services, University of Otago,
Dunedin, N.Z.
Ph +64 3 479-8395, Fax +64 3 479-5080

For information on email virus hoaxes see
http://HoaxBusters.ciac.org/