so something must be wrong with my sogo configuration but i wonder what it could be. any hints?
Sent: Monday, July 25, 2016 at 9:36 PM
From: "\"Ludovic Marcotte\" ([email protected])" <[email protected]>
To: [email protected]
Subject: Re: [SOGo] active security issue ? still alaluating sogo
From: "\"Ludovic Marcotte\" ([email protected])" <[email protected]>
To: [email protected]
Subject: Re: [SOGo] active security issue ? still alaluating sogo
On 2016-07-25 11:33 AM, "sg gs" ([email protected]) wrote:
> it turned out that it is possible to send mail from any user just by
> specifying the username and not entering any (or a wrong) password.
Outlook must be sending caching creds - I've just tried with Outlook
2013 and no way SOGo lets you do that with a wrong password. It keeps
telling you to go away with a 401 code.
Thanks,
--
Ludovic Marcotte
[email protected] :: +1.514.755.3630 :: http://inverse.ca
Inverse inc. :: Leaders behind SOGo (http://sogo.nu), PacketFence (http://packetfence.org) and Fingerbank (http://fingerbank.org)
--
[email protected]
https://inverse.ca/sogo/lists
> it turned out that it is possible to send mail from any user just by
> specifying the username and not entering any (or a wrong) password.
Outlook must be sending caching creds - I've just tried with Outlook
2013 and no way SOGo lets you do that with a wrong password. It keeps
telling you to go away with a 401 code.
Thanks,
--
Ludovic Marcotte
[email protected] :: +1.514.755.3630 :: http://inverse.ca
Inverse inc. :: Leaders behind SOGo (http://sogo.nu), PacketFence (http://packetfence.org) and Fingerbank (http://fingerbank.org)
--
[email protected]
https://inverse.ca/sogo/lists
