Undefined index errors in 1.4.23-SVN

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Undefined index errors in 1.4.23-SVN

Alex-325
Hi,

I'm using squirrelmail-1.4.23-SVN stable on fedora20 and I'm noticing
from the error_log the following errors that keep repeating pretty
frequently:

[Fri Jan 16 17:20:49.130822 2015] [:error] [pid 8752] [client
69.144.179.61:52531] PHP Notice:  Undefined index: ID in
/usr/share/squirrelmail/functions/mailbox_display.php on line 207,
referer:
https://mail.example.com/webmail/src/right_main.php?mailbox=INBOX&sort=0&startMessage=1

This repeats for ID, SUBJECT, RECEIVED_DATE_STRING, and TYPE0.

It looks like this might be the result of some type of unauthorized
access attempt?

There are also entries like the following, which I'm not sure whether
they are related:

[Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
/usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
referer: https://mail.example.com/webmail/src/right_main.php

How can I troubleshoot these further? These warnings don't seem to be
impacting functionality, but I'd sure like to get them fixed.

Thanks,
Alex



------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [hidden email]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Reply | Threaded
Open this post in threaded view
|

Re: Undefined index errors in 1.4.23-SVN

Paul Lesniewski
On 1/18/15, Alex Regan <[hidden email]> wrote:

> Hi,
>
> I'm using squirrelmail-1.4.23-SVN stable on fedora20 and I'm noticing
> from the error_log the following errors that keep repeating pretty
> frequently:
>
> [Fri Jan 16 17:20:49.130822 2015] [:error] [pid 8752] [client
> 69.144.179.61:52531] PHP Notice:  Undefined index: ID in
> /usr/share/squirrelmail/functions/mailbox_display.php on line 207,
> referer:
> https://mail.example.com/webmail/src/right_main.php?mailbox=INBOX&sort=0&startMessage=1
>
> This repeats for ID, SUBJECT, RECEIVED_DATE_STRING, and TYPE0.
>
> It looks like this might be the result of some type of unauthorized
> access attempt?

Why?  Do you have access logs corresponding to these requests?

> There are also entries like the following, which I'm not sure whether
> they are related:
>
> [Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
> 173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
> /usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
> referer: https://mail.example.com/webmail/src/right_main.php
>
> How can I troubleshoot these further? These warnings don't seem to be
> impacting functionality, but I'd sure like to get them fixed.

Look at access logs.  Watch error log when using SquirrelMail; see if
you can reproduce in your own usage.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [hidden email]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Reply | Threaded
Open this post in threaded view
|

Re: Undefined index errors in 1.4.23-SVN

Alex-325
Hi,

>> I'm using squirrelmail-1.4.23-SVN stable on fedora20 and I'm noticing
>> from the error_log the following errors that keep repeating pretty
>> frequently:
>>
>> [Fri Jan 16 17:20:49.130822 2015] [:error] [pid 8752] [client
>> 69.144.179.61:52531] PHP Notice:  Undefined index: ID in
>> /usr/share/squirrelmail/functions/mailbox_display.php on line 207,
>> referer:
>> https://mail.example.com/webmail/src/right_main.php?mailbox=INBOX&sort=0&startMessage=1
>>
>> This repeats for ID, SUBJECT, RECEIVED_DATE_STRING, and TYPE0.
>>
>> It looks like this might be the result of some type of unauthorized
>> access attempt?
>
> Why?  Do you have access logs corresponding to these requests?

Initially it appeared that there were multiple successive entries from
the one IP address, but I think it's more likely that this error just
produces multiple log entries.

>> There are also entries like the following, which I'm not sure whether
>> they are related:
>>
>> [Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
>> 173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
>> /usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
>> referer: https://mail.example.com/webmail/src/right_main.php
>>
>> How can I troubleshoot these further? These warnings don't seem to be
>> impacting functionality, but I'd sure like to get them fixed.
>
> Look at access logs.  Watch error log when using SquirrelMail; see if
> you can reproduce in your own usage.

Any tips on where to start or what it's related to, because it doesn't
happen with every login or every email sent.

Thanks,
Alex

>

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [hidden email]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Reply | Threaded
Open this post in threaded view
|

Re: Undefined index errors in 1.4.23-SVN

Paul Lesniewski
On 1/20/15, Alex Regan <[hidden email]> wrote:

> Hi,
>
>>> I'm using squirrelmail-1.4.23-SVN stable on fedora20 and I'm noticing
>>> from the error_log the following errors that keep repeating pretty
>>> frequently:
>>>
>>> [Fri Jan 16 17:20:49.130822 2015] [:error] [pid 8752] [client
>>> 69.144.179.61:52531] PHP Notice:  Undefined index: ID in
>>> /usr/share/squirrelmail/functions/mailbox_display.php on line 207,
>>> referer:
>>> https://mail.example.com/webmail/src/right_main.php?mailbox=INBOX&sort=0&startMessage=1
>>>
>>> This repeats for ID, SUBJECT, RECEIVED_DATE_STRING, and TYPE0.
>>>
>>> It looks like this might be the result of some type of unauthorized
>>> access attempt?
>>
>> Why?  Do you have access logs corresponding to these requests?
>
> Initially it appeared that there were multiple successive entries from
> the one IP address, but I think it's more likely that this error just
> produces multiple log entries.
>
>>> There are also entries like the following, which I'm not sure whether
>>> they are related:
>>>
>>> [Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
>>> 173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
>>> /usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
>>> referer: https://mail.example.com/webmail/src/right_main.php
>>>
>>> How can I troubleshoot these further? These warnings don't seem to be
>>> impacting functionality, but I'd sure like to get them fixed.
>>
>> Look at access logs.  Watch error log when using SquirrelMail; see if
>> you can reproduce in your own usage.
>
> Any tips on where to start or what it's related to, because it doesn't
> happen with every login or every email sent.

If the referrer is right_main.php, it's probably happening with a
viewed message.  Correlate your access and error logs and you can get
a better idea.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [hidden email]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Reply | Threaded
Open this post in threaded view
|

Re: Undefined index errors in 1.4.23-SVN

Alex-325
Hi,

>>>> [Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
>>>> 173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
>>>> /usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
>>>> referer: https://mail.example.com/webmail/src/right_main.php
>>>>
>>>> How can I troubleshoot these further? These warnings don't seem to be
>>>> impacting functionality, but I'd sure like to get them fixed.
>>>
>>> Look at access logs.  Watch error log when using SquirrelMail; see if
>>> you can reproduce in your own usage.
>>
>> Any tips on where to start or what it's related to, because it doesn't
>> happen with every login or every email sent.
>
> If the referrer is right_main.php, it's probably happening with a
> viewed message.  Correlate your access and error logs and you can get
> a better idea.

I've traced one of these errors, but the timestamp entries for error_log
and access_log entry don't match precisely, which is not what I expected.

I thought it would be easier to point to a pastebin:

# Undefined index
http://pastebin.com/nppWdcmE

# Trying to get property of non-object
http://pastebin.com/LBpM9xrE

Hopefully this helps?

These two errors repeat quite regularly, so I'd really like to figure
out what's causing them.

Thanks,
Alex





------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [hidden email]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Reply | Threaded
Open this post in threaded view
|

Re: Undefined index errors in 1.4.23-SVN

Paul Lesniewski
On 1/21/15, Alex Regan <[hidden email]> wrote:

> Hi,
>
>>>>> [Fri Jan 16 20:29:53.874099 2015] [:error] [pid 12039] [client
>>>>> 173.196.192.34:50709] PHP Notice:  Uninitialized string offset: 47 in
>>>>> /usr/share/squirrelmail/class/mime/Rfc822Header.class.php on line 184,
>>>>> referer: https://mail.example.com/webmail/src/right_main.php
>>>>>
>>>>> How can I troubleshoot these further? These warnings don't seem to be
>>>>> impacting functionality, but I'd sure like to get them fixed.
>>>>
>>>> Look at access logs.  Watch error log when using SquirrelMail; see if
>>>> you can reproduce in your own usage.
>>>
>>> Any tips on where to start or what it's related to, because it doesn't
>>> happen with every login or every email sent.
>>
>> If the referrer is right_main.php, it's probably happening with a
>> viewed message.  Correlate your access and error logs and you can get
>> a better idea.
>
> I've traced one of these errors, but the timestamp entries for error_log
> and access_log entry don't match precisely, which is not what I expected.
>
> I thought it would be easier to point to a pastebin:
>
> # Undefined index
> http://pastebin.com/nppWdcmE
>
> # Trying to get property of non-object
> http://pastebin.com/LBpM9xrE
>
> Hopefully this helps?

Looking in the access log is supposed to help YOU.  Replicate the
problem or contact the user who is triggering the issue.  If you still
think it is an attack, the access logs should tell you a lot about
that.  If you can replicate the problem, when you have a sample
message in hand for us to take a look at, there is a chance (no
promises) we can find something that needs to be fixed.

--
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
New Year. New Location. New Benefits. New Data Center in Ashburn, VA.
GigeNET is offering a free month of service with a new server in Ashburn.
Choose from 2 high performing configs, both with 100TB of bandwidth.
Higher redundancy.Lower latency.Increased capacity.Completely compliant.
http://p.sf.net/sfu/gigenet
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [hidden email]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users