[imp] Possible bug ?

[Matus UHLAR - fantomas]

> Michel Bulgado <michel at casa.co.cu> escribió:
>> I have recently migrated to Horde Groupware Webmail Edition 1.2.3, I
>> have problems, apparently has a bug horde.
>>
>> Let me explain more.
>>
>> From abroad are using a potential vulnerability that may have horde to
>> generate large amounts of mail to multiple servers, aol, hotmail, yahoo
>> etc. ..
>>
>> As a result brought me to block emails from my domains or IP addresses.
>> when they generate this amount of advertising messages in postfix
>> clearly out who was who took delivery of the mail, in this case my
>> webmail. apparently everything is through compose.php page.

On 11.09.09 10:00, michel at casa.co.cu wrote:
> I am sending you the logs generated by apache, I tried to configure   
> horde to generate logs also but I did still like it to work.

> mtnngprs.com - - [11/Sep/2009:02:19:01 -0400] "GET  
> /imp/compose.php?mailbox=INBOX&uniq=1252607369444 HTTP/1.1" 302 -
[...]

the access log tells us nothing. We need php log, webserver's error log,
horde log. And please not to the list, place them in public somewhere.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Saving Private Ryan...
Private Ryan exists. Overwrite? (Y/N)