[imp] hardcoded admin account?

Sam Bashton sam at ipsupport.co.uk
Wed Oct 1 00:29:18 PDT 2003


On Tue, Sep 30, 2003 at 10:30:22AM -0700, Steve McGhee wrote:
> 
> hi there,
> 
>   i have IMP installed on a server and noticed that i had a weak 
> password (admin/admin) and decided to change it.  after doing so, i 
> could still log in as (admin/admin) even though the IMAP server had been 
> updated.
>   i tried testing with another account (tester/password) which i 
> changed to (tester/newpass) which all worked fine (the old pass stopped 
> working immediately, as it should).
> 
>   is there any reason why this admin/admin account is still being 
> allowed to log in? some sort of cache in Horde?

Are you using ImapProxy?  This would produce exactly what you are describing,
in fact it's even in the FAQ:

http://www.kuleuven.net/projects/imapproxy/download/latest/docs/FAQ

-- 
Sam Bashton
Systems Administrator
IP Support 


More information about the imp mailing list