Version 0.98
by Dominique Leuenberger on Mar 18, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: Requires: SquirrelMail 1.2.7 / VPopMail
Description: ----[ Changelog
--- 0.98 ---
*** UPDATE URGENTLY RECOMENDED ***
Fixed a remote exploit which allowed the users to do some
bad stuff with your vpopmail installation
*** UPDATE URGENTLY RECOMENDED ***
Different users reported when running squirrelmail with vpopmail hosting
only a singledomain, the vpopmail-plugin would not be able to change
passwords. All other functions would be nonfunctional as well.
While analyzing we found the user only logs in using and not
. As VPopmail inetrnal identifies all users by their
complete E-Mail-Address, this error occoured.
--> FIX
There's now a new option in config.php: $vpopmail_defaultdomain
Just set it to whatever domain your users should be on.
Whenever a user logs in with complete , the config
option will be overridden. For the other case,
$vpopmail_defaultdomain will be used.
Version 0.97
by Dominique Leuenberger on Jan 15, 2003
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.7 / VPopMail
Description: There are no new features this time.
Plugin has been reviewed so it works with
register_globals=Off as requested by some users.
Version 0.96
by Dominique Leuenberger on Jul 2, 2002
[ This version is not available. You might be able to get it by asking on the "squirrelmail-plugins" mailing list or by contacting the author. ]
Requires: SquirrelMail 1.2.6 / Vpopmail
Description:
----[ Changelog
--- 0.96 ---
Security Fix (minor risk)
- Directory for messages has been created with to much rights.
Thanks to Nico