Package: courier-pop
Version: 0.59.0-3
Severity: normal

/etc/init.d/courier-pop start courier with this:

    /usr/bin/env - /bin/sh -c " set -a; \
                . ${sysconfdir}/pop3d; \
                if [ "$SSLCONFIG" ]; then . ${sysconfdir}/pop3d-ssl; fi; \
                POP3_STARTTLS=$POP3_STARTTLS; export POP3_STARTTLS; \
                TLS_PROTOCOL=$TLS_STARTTLS_PROTOCOL; \
                /usr/sbin/courierlogger -pid=$PIDFILE -start $LOGGEROPTS \
            $TCPD \
                -maxprocs=$MAXDAEMONS -maxperip=$MAXPERIP \
                $TCPDOPTS -address=$ADDRESS $PORT \
                ${libexecdir}/courier/courierpop3login $AUTHMODULELIST \
                ${libexecdir}/courier/courierpop3d $MAILDIRPATH"


when I try to login with telnet:

$ telnet xx.xx.xx.xx 110
Trying xx.xx.xx.xx...
Connected to xx.xx.xx.xx.
Escape character is '^]'.
-ERR pop3login requires exactly two arguments.
Connection closed by foreign host.

Looking at source code:
imap/pop3login.c (line 262)

You can see that courierpop3login need 2 args

ps aux| grep courierpop3login 

show only one: /usr/lib/courier/courier/courierpop3d

$MAILDIRPATH don't set, $MAILDIR yes

I suppose courier-imap is with the same bug

Please sanitize MAILDIRPATH if not set, patch:

--- debian/courier-pop.init     2008-07-15 19:08:15.000000000 +0200
+++ debian/courier-pop.init~    2008-07-15 19:32:33.000000000 +0200
@@ -35,8 +35,8 @@
 if [ -f /etc/default/courier ]; then
        . /etc/default/courier
 fi
-if [ -z "$MAILDIR" ]; then
-       MAILDIR=Maildir
+if [ -z "$MAILDIRPATH" ]; then
+       MAILDIRPATH=Maildir
 fi
 
 if [ -f "${sysconfdir}/pop3d-ssl" ]; then


During upgrade my /etc/default/courier have old var:

# This file is automatically generated by maintainer scripts.
# You may modifiy this file, but additional values and format
# modifications will not be preserved.
MAILDIR="Maildir"


-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)


Versions of packages courier-pop depends on:
ii  courier-authlib               0.60.1-2.1 Courier authentication library
ii  courier-base                  0.59.0-3   Courier mail server - base system
ii  libc6                         2.7-10     GNU C Library: Shared libraries
ii  postfix [mail-transport-agent 2.5.2-1    High-performance mail transport ag

courier-pop recommends no packages.

-- no debconf information



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to