General discussion on installation and configuration of SOGo

Text archives Help


Re: [SOGo] active security issue ? still alaluating sogo


Chronological Thread 
  • From: "Ludovic Marcotte" ( ) < >
  • To:
  • Subject: Re: [SOGo] active security issue ? still alaluating sogo
  • Date: Mon, 25 Jul 2016 15:36:50 -0400
  • Dmarc-filter: OpenDMARC Filter v1.2.0 mail.inverse.ca 687CB11A0D8C

On 2016-07-25 11:33 AM, "sg gs"
( )
wrote:

it turned out that it is possible to send mail from any user just by specifying the username and not entering any (or a wrong) password.

Outlook must be sending caching creds - I've just tried with Outlook 2013 and no way SOGo lets you do that with a wrong password. It keeps telling you to go away with a 401 code.

Thanks,

--
Ludovic Marcotte

:: +1.514.755.3630 :: http://inverse.ca
Inverse inc. :: Leaders behind SOGo (http://sogo.nu), PacketFence
(http://packetfence.org) and Fingerbank (http://fingerbank.org)




Archive powered by MHonArc 2.6.18.

Top of page