On Sun, Oct 24, 2010 at 10:11 PM, Praveen C <praveen.c@xxxxxxxxxx> wrote: > Hi, > > We are using squirrellmail as our web mail. User's preference file is > getting changed anonymously. Email address and full name is changing to any > some other email address and full name in the same domain > > We are using ldap as our user database and Retrieve User Data plugin also > installed and configured to retrieve user's details from ldap database. Is > there any security patch available for this? You ask as if you've identified a known bug in SquirrelMail. Please do not do that unless you can provide more accurate proof. First, please disable all plugins and try again. Second, refer to the mailing list posting guidelines and post all relevant information. You need to narrow down when and how this happens, give a more accurate explanation (examples really help) and show how to duplicate the behavior in order for anyone to suggest a fix. > squirrelmail version installed is 1.4.15 Try upgrading to our newest release, which is already 1.4.21. You also might want to try the Login Check plugin. > permission for squirrelmail data folder is given as > drwx-wx--- 2 root www-data 331776 2010-10-25 10:38 > /var/lib/squirrelmail/data/ -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ------------------------------------------------------------------------------ Nokia and AT&T present the 2010 Calling All Innovators-North America contest Create new apps & games for the Nokia N8 for consumers in U.S. and Canada $10 million total in prizes - $4M cash, 500 devices, nearly $6M in marketing Develop with Nokia Qt SDK, Web Runtime, or Java and Publish to Ovi Store http://p.sf.net/sfu/nokia-dev2dev ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
