Re: Please help me!

check old mail stores.. May 2003



On Wed, 7 May 2003, [iso-8859-2] Gödrösi János wrote:

> I have version 1.25 installed on Linux Mandrake 9.1 (perl 5.8.0)
>  - copy the MD5 from CD1 /misc to /usr/lib/perl5
>  - run setup.pl
>  - localhost/cgi-bin/neomail.pl
>  - login OK
>  - read message NOT WORK, the following messega:
> 
> IInsecure dependency in open while running setgid at 
> /var/www/cgi-bin/neomail.pl line 2775.
> 
> I find this patch, but don't work....
> 
> ### BEGIN of neomail.pl.patch ###
> --- neomail.pl  Mon Aug 26 15:46:56 2002
> +++ /usr/local/neomail/cgi-bin/neomail.pl       Mon Aug 26 16:01:31 
> 2002
> @@ -20,7 +20,7 @@
> 
> use strict;
> no strict 'vars';
> -push (@INC, '/var/neomail');
> +unshift (@INC, '/var/neomail');
> use CGI qw(:standard);
> use CGI::Carp qw(fatalsToBrowser);
> use Fcntl qw(:DEFAULT :flock);
> @@ -196,9 +196,10 @@
>    my $isvalid = 0;
>    @validfolders = @{&getfolders()};
>    if (param("folder")) {
> -      $folder = param("folder");
> +      my $basketcase=param("folder");
>       foreach my $checkfolder (@validfolders) {
> -         if ($folder eq $checkfolder) {
> +         if ($basketcase eq $checkfolder) {
> +            $folder = $checkfolder;
>             $isvalid = 1;
>             last;
>          }
> @@ -407,6 +408,7 @@
>                   ($filename eq '.') ||
>                   ($filename eq '..')
>                 ) {
> +           $filename =~ /^(.*)$/; $filename = $1; # untaint folder
>             push (@folders, $filename);
>             $totalfoldersize += ( -s "$folderdir/$filename" );
>          }
> ### END of neomail.pl.patch ###
> 
> Please help, what can i do?
> 
> 
> Godrosi Janos
> from Hungary
> 
> 
> -------------------------------------------------------
> Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
> The only event dedicated to issues related to Linux enterprise solutions
> www.enterpriselinuxforum.com
> 
> _______________________________________________
> NeoMail-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/neomail-users
> 



-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com