"," in external Email Password kills fetchmail

[christian.seyfarth@…]

If the password for the external retrieval service contain a "," the file /etc/ebox-fetchmail.rc gets compromised:

poll mailserver.example.com proto imap port 993:

user john.doe, with password kerK,sev, is jdoe@… here ssl;

won't work, but

poll mailserver.example.com proto imap port 993:

user john.doe, with password kerKFsev, is jdoe@… here ssl;

works.

Reason: the "," is used as sepaprator in this file, and whithout any masquerading the "," in the password will be not recognized as part of th password, but as "pasword end".

[jamor@…]

Hello Christian Seyfart,

I think you are using a old version of the mail module. Since 2.1.1 there is quoting. You get configuration files like this one:

poll pop.gmail.com proto pop3 uidl port 995:
   user gibon@external.com, with password 'a,a', is gibon@monos.org here ;

So I recommend you to upgrade the mail module.

Cheers,

Javier