| Newsgroups |
gmane.mail.neomail.general |
| Organization |
WarmerByTheLake.com |
| Message-ID |
<[email protected]> |
Mr. Janos,
Please see the unofficial FAQ, specificly, the question regarding what info
to post to the list when something doesn't work... "It don't work" doesn't
help us help you. What happened when you applied the patch? What happened
afterward? What error messages did you get afterward? Anything in the apache
(error) logs?
(In your favor, you did post all the relevant details, but only up to the
point of the patch not working. And you're right, that is the correct
patch).
http://warmerbythelake.com/neomail/faq.htm
Tod D. Ihde
On Wed, May 07, 2003 at 11:50:22AM +0000, G?dr?si J?nos wrote:
> I have version 1.25 installed on Linux Mandrake 9.1 (perl 5.8.0)
> - copy the MD5 from CD1 /misc to /usr/lib/perl5
> - run setup.pl
> - localhost/cgi-bin/neomail.pl
> - login OK
> - read message NOT WORK, the following messega:
>
> IInsecure dependency in open while running setgid at
> /var/www/cgi-bin/neomail.pl line 2775.
>
> I find this patch, but don't work....
>
> ### BEGIN of neomail.pl.patch ###
> --- neomail.pl Mon Aug 26 15:46:56 2002
> +++ /usr/local/neomail/cgi-bin/neomail.pl Mon Aug 26 16:01:31
> 2002
> @@ -20,7 +20,7 @@
>
> use strict;
> no strict 'vars';
> -push (@INC, '/var/neomail');
> +unshift (@INC, '/var/neomail');
> use CGI qw(:standard);
> use CGI::Carp qw(fatalsToBrowser);
> use Fcntl qw(:DEFAULT :flock);
> @@ -196,9 +196,10 @@
> my $isvalid = 0;
> @validfolders = @{&getfolders()};
> if (param("folder")) {
> - $folder = param("folder");
> + my $basketcase=param("folder");
> foreach my $checkfolder (@validfolders) {
> - if ($folder eq $checkfolder) {
> + if ($basketcase eq $checkfolder) {
> + $folder = $checkfolder;
> $isvalid = 1;
> last;
> }
> @@ -407,6 +408,7 @@
> ($filename eq '.') ||
> ($filename eq '..')
> ) {
> + $filename =~ /^(.*)$/; $filename = $1; # untaint folder
> push (@folders, $filename);
> $totalfoldersize += ( -s "$folderdir/$filename" );
> }
> ### END of neomail.pl.patch ###
>
> Please help, what can i do?
>
>
> Godrosi Janos
> from Hungary
--
* This email posted in pure ASCII * HTML is for browsers. *
* for your protection. * My MUA is not a browser. *
* chown -R us.us yourbase * KC0MRX *
-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com