General discussion on installation and configuration of SOGo

Text archives Help

Re: [SOGo] active security issue ? still alaluating sogo

Chronological Thread 
  • From: "Ludovic Marcotte" ( ) < >
  • To:
  • Subject: Re: [SOGo] active security issue ? still alaluating sogo
  • Date: Mon, 25 Jul 2016 15:36:50 -0400
  • Dmarc-filter: OpenDMARC Filter v1.2.0 687CB11A0D8C

On 2016-07-25 11:33 AM, "sg gs"
( )

it turned out that it is possible to send mail from any user just by specifying the username and not entering any (or a wrong) password.

Outlook must be sending caching creds - I've just tried with Outlook 2013 and no way SOGo lets you do that with a wrong password. It keeps telling you to go away with a 401 code.


Ludovic Marcotte

:: +1.514.755.3630 ::
Inverse inc. :: Leaders behind SOGo (, PacketFence
( and Fingerbank (

Archive powered by MHonArc 2.6.18.

Top of page