Fix (again) security issue in DBMail driver of password plugin [CVE-2015-21...

Aleksander Machniak

2016-01-21 8ef598b88385cbe9322174c0c63118a082609748

 plugins/password/drivers/dbmail.php

@@ -40,20 +40,9 @@
        $args     = rcmail::get_instance()->config->get('password_dbmail_args', '');
        $command  = "$curdir/chgdbmailusers -c $username -w $password $args";

        if (strlen($command) > 1024) {
            rcube::raise_error(array(
                'code' => 600,
                'type' => 'php',
                'file' => __FILE__, 'line' => __LINE__,
                'message' => "Password plugin: The command is too long."
                ), true, false);
        exec($command, $output, $return_value);

            return PASSWORD_ERROR;
        }

        exec($command, $output, $returnvalue);

        if ($returnvalue == 0) {
        if ($return_value == 0) {
            return PASSWORD_SUCCESS;
        }
        else {