Hi!

I've been using qmailadmin for a while now, and these errors always
happened, so possibly it's something related to running gentoo-hardened. In
short, I cannot use many of the checkboxes to create/modify a mailing list.

1) Prefix outgoing subject headers with: <any string here>
results in "Internal Server Error" (no change for non idn domain)
apache error log has:
[Thu Oct 14 13:11:23 2010] [error] [client 109.251.3.19] mod_mime_magic:
can't read `/var/www/localhost/cgi-bin/qmailadmin', referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:11:23 2010] [error] [client 109.251.3.19] *** buffer overflow
detected ***: qmailadmin - terminated, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:11:23 2010] [error] [client 109.251.3.19] qmailadmin: buffer
overflow attack in function <unknown> - terminated, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:11:23 2010] [error] [client 109.251.3.19] Report to
http://bugs.gentoo.org/, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:11:23 2010] [error] [client 109.251.3.19] , referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:11:23 2010] [error] [client 109.251.3.19] Premature end of
script headers: qmailadmin, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:11:24 2010] [error] [client 109.251.3.19] File does not
exist: /var/www/localhost/htdocs/favicon.ico


2) Include a trailer at the end of each message.
results in "Internal Server Error" (no change for non idn domain)
apache error log has:
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] mod_mime_magic:
can't read `/var/www/localhost/cgi-bin/qmailadmin', referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] *** buffer overflow
detected ***: qmailadmin - terminated, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] qmailadmin: buffer
overflow attack in function <unknown> - terminated, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] Report to
http://bugs.gentoo.org/, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] , referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] Premature end of
script headers: qmailadmin, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:15:48 2010] [error] [client 109.251.3.19] File does not
exist: /var/www/localhost/htdocs/favicon.ico


3) sending replies to the entire list
results in "Internal Server Error" (no change for non idn domain)
apache error log has:
[Thu Oct 14 13:18:25 2010] [error] [client 109.251.3.19] mod_mime_magic:
can't read `/var/www/localhost/cgi-bin/qmailadmin', referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:18:26 2010] [error] [client 109.251.3.19] *** buffer overflow
detected ***: qmailadmin - terminated, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:18:26 2010] [error] [client 109.251.3.19] qmailadmin: buffer
overflow attack in function <unknown> - terminated, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:18:26 2010] [error] [client 109.251.3.19] Report to
http://bugs.gentoo.org/, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:18:26 2010] [error] [client 109.251.3.19] , referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:18:26 2010] [error] [client 109.251.3.19] Premature end of
script headers: qmailadmin, referer: http://
****.com/cgi-bin/qmailadmin/com/modmailinglist?user=postmaster&dom=
xn--piemontis-63a.eu&time=1287052638&modu=assistensa
[Thu Oct 14 13:18:26 2010] [error] [client 109.251.3.19] File does not
exist: /var/www/localhost/htdocs/favicon.ico

Unless there is a quick fix, I'd be at least very grateful if anyone could
point me to a workaround for points 2 and 3. I already found out how to
manually set a prefix from vpopmail, but I have no luck with the others, and
especially "reply to list" is quite important.

Bèrto


!DSPAM:4cb6e7e032711595771589!

Reply via email to