| 1 |
slords |
1.1 |
diff -Nur -x '*.orig' -x '*.rej' qpsmtpd-0.31.1/lib/Qpsmtpd/Auth.pm mezzanine_patched_qpsmtpd-0.31.1/lib/Qpsmtpd/Auth.pm |
| 2 |
|
|
--- qpsmtpd-0.31.1/lib/Qpsmtpd/Auth.pm 2005-11-18 04:45:36.000000000 -0500 |
| 3 |
|
|
+++ mezzanine_patched_qpsmtpd-0.31.1/lib/Qpsmtpd/Auth.pm 2006-03-26 11:58:27.000000000 -0500 |
| 4 |
|
|
@@ -240,12 +240,21 @@ |
| 5 |
|
|
} |
| 6 |
|
|
( $passHash, $user, $passClear ) = split /\x0/, |
| 7 |
|
|
decode_base64($prekey); |
| 8 |
|
|
- |
| 9 |
|
|
+ unless ($user && $passClear) |
| 10 |
|
|
+ { |
| 11 |
|
|
+ $session->respond(504, "Invalid authentification string"); |
| 12 |
|
|
+ return DECLINED; |
| 13 |
|
|
+ } |
| 14 |
|
|
} |
| 15 |
|
|
elsif ($mechanism eq "login") { |
| 16 |
|
|
|
| 17 |
|
|
if ( $prekey ) { |
| 18 |
|
|
($passHash, $user, $passClear) = split /\x0/, decode_base64($prekey); |
| 19 |
|
|
+ unless ($user && $passClear) |
| 20 |
|
|
+ { |
| 21 |
|
|
+ $session->respond(504, "Invalid authentification string"); |
| 22 |
|
|
+ return DECLINED; |
| 23 |
|
|
+ } |
| 24 |
|
|
} |
| 25 |
|
|
else { |
| 26 |
|
|
|
| 27 |
|
|
diff -Nur -x '*.orig' -x '*.rej' qpsmtpd-0.31.1/plugins/auth/auth_cvm_unix_local mezzanine_patched_qpsmtpd-0.31.1/plugins/auth/auth_cvm_unix_local |
| 28 |
|
|
--- qpsmtpd-0.31.1/plugins/auth/auth_cvm_unix_local 2005-11-18 04:45:34.000000000 -0500 |
| 29 |
|
|
+++ mezzanine_patched_qpsmtpd-0.31.1/plugins/auth/auth_cvm_unix_local 2006-03-26 11:38:48.000000000 -0500 |
| 30 |
|
|
@@ -83,6 +83,9 @@ |
| 31 |
|
|
my ( $self, $transaction, $method, $user, $passClear, $passHash, $ticket ) = |
| 32 |
|
|
@_; |
| 33 |
|
|
|
| 34 |
|
|
+ return (DENY, "authcvm/$method: invalid format") |
| 35 |
|
|
+ unless ($user && $passHash); |
| 36 |
|
|
+ |
| 37 |
|
|
$self->log(LOGINFO, "authcvm/$method authentication attempt for: $user"); |
| 38 |
|
|
|
| 39 |
|
|
socket(SOCK, PF_UNIX, SOCK_STREAM, 0) |
Parent Directory
| 
Revision Log
| 
Revision Graph
