Re: Re: Perl 5.8 and Neomail

Taken from the mail from [email protected]
Mon, 26 Aug 2002 16:21:42 -0700

###########################################
<quoted>
Turns out there's a bit more that broke...  Here's a patch file to be 
used against the neomail 1.25 base.

Dump the contents into a file called "neomail.pl.patch" into your 
neomail source directory.  Type "patch < neomail.pl.patch" and it will 
patch the "neomail.pl" file.  You can now either run "./setup.pl" 
again to reinstall or you can copy the file into your /cgi-bin 
directory and set appropriate ownership and permissions...

### BEGIN of neomail.pl.patch ###
--- neomail.pl  Mon Aug 26 15:46:56 2002
+++ /usr/local/neomail/cgi-bin/neomail.pl       Mon Aug 26 16:01:31 
2002
@@ -20,7 +20,7 @@

use strict;
no strict 'vars';
-push (@INC, '/var/neomail');
+unshift (@INC, '/var/neomail');
use CGI qw(:standard);
use CGI::Carp qw(fatalsToBrowser);
use Fcntl qw(:DEFAULT :flock);
@@ -196,9 +196,10 @@
   my $isvalid = 0;
   @validfolders = @{&getfolders()};
   if (param("folder")) {
-      $folder = param("folder");
+      my $basketcase=param("folder");
      foreach my $checkfolder (@validfolders) {
-         if ($folder eq $checkfolder) {
+         if ($basketcase eq $checkfolder) {
+            $folder = $checkfolder;
            $isvalid = 1;
            last;
         }
@@ -407,6 +408,7 @@
                  ($filename eq '.') ||
                  ($filename eq '..')
                ) {
+           $filename =~ /^(.*)$/; $filename = $1; # untaint folder
            push (@folders, $filename);
            $totalfoldersize += ( -s "$folderdir/$filename" );
         }
### END of neomail.pl.patch ###

-Jonathan


</quoted>
##########################################

Torsten



David schrieb:
> 
> Hi again,
> 
> I solved my suidperl problem with this info:
> 
> Recompile your perl with suid enabled
>          Here are the steps:
>          1. grab the perl source tar ball
>          2. sh Configure -de (de means default perl config)
>          3. edit config.sh and set this :
>             d_dosuid='define'
>             d_suidsafe='undef'
>          4. then make, make install (make suidperl if needed)
>          5. if you have compiled suidperl, then chmod 4555 suidperl
> 
> Now I need the Perl 5.8 patch. Can someone please provide me with a patched
> version of neomail.pl (or the patch itself)
> 
> Neomail almost works right now:) I get this error:
> 
> Insecure dependency in open while running setuid at
> /var/www/cgi-bin/neomail.pl line 2775.
> 
>  TIA,
>  /David
> 
> > Dear gurus,
> >
> > I'm new on this list:) Due to problems with an other application I have
> > upgraded a friends linux box with Perl 5.8 My problem now is that his
> > Neomail 1.25 installation is broken.
> >
> > I read the archives and found a patch to solve some Perl 5.8 problems. I'm
> > not able to apply this patch for some strange reason. I wonder if someone
> > can provide me with a patched neomail.pl file
> >
> > I have the classic problem discussed recently on your list:
> >
> > neomail.pl: Can't locate neomail.conf in @INC (@INC contains:
> > /usr/local/lib/perl5/5.6.1/i686-linux /usr/local/lib/perl5/5.6.1
> > /usr/local/lib/perl5/site_perl/5.6.1/i686-linux
> > /usr/local/lib/perl5/site_perl/5.6.1 /usr/local/lib/perl5/site_perl
> > /var/neomail) at /home/httpd/cgi-bin/neomail.pl line 37
> >
> > I have compiled Perl with setuid emulation to support suidperl, and tried to
> > use the suid option in the Neomail setup with no result. I don't have a
> > permission problem.
> >
> > Please help!
> >
> > TIA,
> > /David
> >
> >
> >
> >
> >
> >
> > --__--__--
> >
> > _______________________________________________
> > NeoMail-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/neomail-users
> >
> >
> > End of NeoMail-users Digest
> >
> >
> 
> -------------------------------------------------------
> This sf.net email is sponsored by: viaVerio will pay you up to
> $1,000 for every account that you consolidate with us.
> http://ad.doubleclick.net/clk;4749864;7604308;v?
> http://www.viaverio.com/consolidator/osdn.cfm
> _______________________________________________
> NeoMail-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/neomail-users


-------------------------------------------------------
This sf.net email is sponsored by: viaVerio will pay you up to
$1,000 for every account that you consolidate with us.
http://ad.doubleclick.net/clk;4749864;7604308;v?
http://www.viaverio.com/consolidator/osdn.cfm