PHP 5.2

Hello list, 

I'm facing to a bug, probably related to php 5.2.1 (urged to
upgrade
because of Month of PHP bugs : http://www.php-security.
org/). and POP3
auth.

To make it short, maia block all my logins, saying wrong
password. After
sniffing communications, I've noticed that maia use APOP for
login, but
my server doesnt support APOP.

It looks like PEAR::Net_POP3 doesnt take care of server's
CAPA.

So, I've forced old USER way with modifying maia's auth.php
: 
        $result = $mbox->login($user, $pass, 'USER');


Hope this could helps.

-- 
        Alexandre

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alexandre Ghisoli wrote:
> Hello list, 
> 
> I'm facing to a bug, probably related to php 5.2.1
(urged to upgrade
> because of Month of PHP bugs : http://www.php-security.
org/). and POP3
> auth.
> 
> To make it short, maia block all my logins, saying
wrong password. After
> sniffing communications, I've noticed that maia use
APOP for login, but
> my server doesnt support APOP.
> 
> It looks like PEAR::Net_POP3 doesnt take care of
server's CAPA.
> 
> So, I've forced old USER way with modifying maia's
auth.php : 
>         $result = $mbox->login($user, $pass,
'USER');
> 
> 
> Hope this could helps.
> 

PEAR's Net_POP3 has had a few issues in the past with CAPA
problems.  One
question is, does the server advertise APOP but not support
it (That was the
case last time I saw this)

Go ahead and make a ticket for this on the trac site.

- --
David Morton
Maia Mailguard                        - http://www.maiamailguard
.com
Morton Software Design and Consulting - http://www.dgrmm.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


iD8DBQFGBAZoUy30ODPkzl0RAkiRAJ42oZEVXLO7cWoub65jmZrcWVCcyQCf
asA/
ChJ9C7LT3Xu/JKtZ9XDmVZo=
=EI9n
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

Le vendredi 23 mars 2007 à 11:55 -0500, David Morton a
écrit :
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Alexandre Ghisoli wrote:
> > Hello list, 
> > 
> > I'm facing to a bug, probably related to php 5.2.1
(urged to upgrade
> > because of Month of PHP bugs : http://www.php-security.
org/). and POP3
> > auth.
> > 
> > To make it short, maia block all my logins, saying
wrong password. After
> > sniffing communications, I've noticed that maia
use APOP for login, but
> > my server doesnt support APOP.
> > 
> > It looks like PEAR::Net_POP3 doesnt take care of
server's CAPA.
> > 
> > So, I've forced old USER way with modifying maia's
auth.php : 
> >         $result = $mbox->login($user, $pass,
'USER');
> > 
> > 
> > Hope this could helps.

David, 

> PEAR's Net_POP3 has had a few issues in the past with
CAPA problems.  One
> question is, does the server advertise APOP but not
support it (That was the
> case last time I saw this)

My server didnt return APOP : 

telnet 110 :
...
Escape character is '^]'.
+OK Teapop [0.3.8] - Teaspoon stirs around again
<1174667581.EC20A7ELlywellyn>
CAPA
+OK These are my limits, Sir
TOP
USER
LOGIN-DELAY 900
UIDL
EXPIRE NEVER
IMPLEMENTATION Teapop-0.3.8
.
quit
+OK I hope you will be back for your mail later, Sir.

> Go ahead and make a ticket for this on the trac site.

Done : #455

Regards

-- 
        Alexandre

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users