Fri, 08 Aug 2008 14:33:01 -0400 http://bugs.horde.org/ticket/4505 Missing error checks on fgets and fputs in poppassd.php driver The poppassd driver is missing some error checks on the fgets and fputs commands. I'm running poppassd from inetd (on Debian 3.1) and am restricting access to it with hosts.allow and hosts.deny If you block access to poppassd completely (e.g., "poppassd: ALL" in /etc/hosts.deny), then Passwd will report succes, even though the change failed. This is because it can connect to the service (i.e., open a socket), but not use it. The 200 welcome code is also not sent to the client. So, after sending the user command, the service returns nothing. The poppassd.php code does not check this however. I have created a small patch that fixes this, which I'll attach to this bugreport. regards, Leander Sun, 08 Oct 2006 12:58:01 -0400 http://bugs.horde.org/ticket/4505#t24732 Tweaked and committed, thanks. Mon, 09 Oct 2006 11:46:16 -0400 http://bugs.horde.org/ticket/4505#t24777