james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From j...@apache.org
Subject [jira] Closed: (JAMES-89) Adding users without any security check
Date Sun, 06 Jun 2004 21:03:53 GMT
Message:

   The following issue has been closed.

---------------------------------------------------------------------
View the issue:
  http://issues.apache.org/jira/browse/JAMES-89

Here is an overview of the issue:
---------------------------------------------------------------------
        Key: JAMES-89
    Summary: Adding users without any security check
       Type: Bug

     Status: Closed
 Resolution: FIXED

    Project: James
 Components: 
             UsersStore & UsersRepository
   Versions:
             2.1

   Assignee: 
   Reporter: Stefano Toparini

    Created: Thu, 20 Feb 2003 10:55 AM
    Updated: Sun, 6 Jun 2004 2:02 PM
Environment: Operating System: Windows NT/2K
Platform: PC

Description:
I found it's possible to add James users without connecting via telnet.

On my James server (with Apache and Tomcat) and with a specific URL to
localhost, through Phoenix/MX4J interface, I can add user without any security
check.

Contact me for more precise informations

Bye, 
Stefano


---------------------------------------------------------------------
JIRA INFORMATION:
This message is automatically generated by JIRA.

If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa

If you want more information on JIRA, or have a bug to report see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Mime
View raw message