[vchkpw] vpopmaild - BUG: SA_ADMIN cannot get user_info

[Marcin Sołtysiak]

Although logged as SA_ADMIN user cannot get user_info from oter domains.
Here is a patch:


--- vpopmail-5.5.2-orig/vpopmaild.c     Tue Apr  6 01:03:22 2004
+++ vpopmail-5.5.2/vpopmaild.c  Tue Apr  6 16:47:50 2004
@@ -563,7 +563,7 @@
     return(-1);
   }

-  if ( (AuthVpw.pw_gid&QA_ADMIN) && (strcmp(TheDomain,TmpDomain))!=0 ) {
+  if ( ((AuthVpw.pw_gid & QA_ADMIN) && (strcmp(TheDomain,TmpDomain))!=0) &&
!(AuthVpw.pw_gid & SA_ADMIN) ) {
     snprintf(WriteBuf,sizeof(WriteBuf),
       RET_ERR "XXX not authorized for domain\n");
     return(-1);


BTW. Since vpopmaild is very young it will need a heavy develoopment. It
would be resonable to create a separate category in bugtraq.

Solt