Password disclosure in LDAP Driver passwd-h3-3.1-rc1
Joffrey van Wageningen <[email protected]>
| Newsgroups | gmane.comp.horde.sork |
|---|---|
| Message-ID | <Pine.LNX.4.64.0901212008340.7970@sirius-r5> |
Hi List,
Thanks for updating the Sork packages, its nice to see the last release
updated to 2009! Although still a RC this version has a nasty password
disclosing (debug?) line in the LDAP Driver of Password:
$Horde: passwd/lib/Driver/ldap.php,v 1.41.2.6 2009/01/06 15:25:23 jan Exp $
line 131: return pear::raiseError(_("Incorrect old password.") .
Auth::getCredential('password') .'x');
FYI.
With kind regards,
Joffrey van Wageningen
--
Sork mailing list - Join the hunt: http://horde.org/bounties/#sork
Frequently Asked Questions: http://horde.org/faq/
To unsubscribe, mail: [email protected]