duplicate entrys in AUTH.TAB

Discussion forum for Enterprise Edition.
Post Reply
ITCMSOLUTIONS
Posts: 4
Joined: Wed Mar 22, 2017 12:25 pm

duplicate entrys in AUTH.TAB

Post by ITCMSOLUTIONS » Wed Mar 22, 2017 1:14 pm

Hi everyone, we encounter the problem that when a user changes the webmail password, the AUTH.TAB registry entry is duplicated.
This allows the user to enter their webmail with the old password and with the new one.
Has someone happened to you?
Do you know how to solve it?

regards
thank you for your help

netmo
Posts: 31
Joined: Mon Jun 20, 2011 7:46 pm

Re: duplicate entrys in AUTH.TAB

Post by netmo » Fri Mar 24, 2017 3:09 pm

Yes this happening for us too. We reset the password for a client and the client was still sending out spam. Then we went in to auth.tab and noticed both passwords were available. We also noticed many accounts had the same scenario.

ITCMSOLUTIONS
Posts: 4
Joined: Wed Mar 22, 2017 12:25 pm

Re: duplicate entrys in AUTH.TAB

Post by ITCMSOLUTIONS » Tue Mar 28, 2017 6:56 am

Yes, it's a real security problem.
We have hundreds of users and at the moment we have not been able to solve it. The file not having a date field, it is not possible to know with certainty which is the old password. And so it is not possible to clean it with a script.
I hope someone from mailenable can answer us, because if it's a bug, it's a big bug.

regards

MailEnable-Ian
Site Admin
Posts: 8976
Joined: Mon Mar 22, 2004 4:44 am
Location: Melbourne, Victoria, Australia

Re: duplicate entrys in AUTH.TAB

Post by MailEnable-Ian » Tue Mar 28, 2017 10:52 pm

Hi,

What version of MailEnable are you running? Perhaps lodge a support ticket via the link below under "installation" or "Upgrade" and provide access to the server and credentials for a mailbox exhibiting the behavior so we can emulate the problem. I have tried to emulate this in version 9.72 without success.

https://www.mailenable.com/support/step1.asp
Regards,

Ian Margarone
MailEnable Support

ITCMSOLUTIONS
Posts: 4
Joined: Wed Mar 22, 2017 12:25 pm

Re: duplicate entrys in AUTH.TAB

Post by ITCMSOLUTIONS » Wed Mar 29, 2017 7:39 pm

Hello good morning, the version we are running is 9.72.
Okay. Open a ticket in the link indicated.

Post Reply