[Kroupware] BUG: ZfOS Kolab (OpenPKG 2.0)

[Stephan Buys]

Hi all,

We just wanted to let you know that we have discovered a bug in Cyrus IMAPd
with it's handling of Virtual Domains.

AFFECTED VERSIONS:

Please note that this only affects the latest version of Kolab as distributed via the ZfOS
site. Specifically cyrus-imapd-2.2.3.
Remember that this version of Kolab should be regarded as a development version, it
is not yet officially released as the next version of Kolab.

DETAILS:

The problems comes in with the way that the Cyrus IMAP daemon parses mailbox names
to it's internal format.

According to RFC3501 (IMAP4rev1), US-ASCII characters and characters 
representable by UTF-7 are valid for mailbox names. This includes the @ sign (0x40), which
falls within US-ASCII.

The Cyrus IMAP daemon (with virtual domains enabled) assumes that an @ character
is always used to delimit a virtual mailbox, thus returning "Invalid Mailbox Name" whenever
an @ sign is included in the name of a mailbox.

IMPLICATIONS:

- You will not be able to create folders with an @ sign in the name using Imapd 2.2.3 as 
configured in Kolab.
- There will be problems when using the Toltec connector if a mailbox name includes any
special characters, as Toltec uses @ as an escape character when encoding special 
characters. This is a legal UTF-7 encoding according to RFC3501.

We will try to resolve this issue as soon as possible and have already engaged the Cyrus
developers for assistance.

Kind regards,
-- 
Stephan  Buys
Code Fusion cc.
Tel: +27 11 391 1412
Mobile: +27 83 294 1876
Email: s.buys at codefusion.co.za