Status/Resolution/Reason: Closed/Withdrawn/ThirdParty
Reporter/Name(from Bugbase): Aaron Neff / Aaron Neff (Aaron Neff)
Created: 04/28/2016
Components: Net Protocols
Versions: 2016
Failure Type:
Found In Build/Fixed In Build: CF2016_Final /
Priority/Frequency: Major / Some users will encounter
Locale/System: English / Platforms All
Vote Count: 0
cfimap movemail creates new connection for each move. Mail servers can treat this as a DoS attack, when moving many emails.
Repro:
<cfscript>
emailServer = "mail.domain.com";
emailAddress = "user@domain.com";
emailPassword = "password";
for(i=1; i<=6; i++) {//create some test emails
cfmail(from=emailAddress, to=emailAddress, subject="cfimap mailmove test") {writeOutput('message ' & i);}
}
cfimap(action="open", server=emailServer, username=emailAddress, password=emailPassword, connection="myConnection");
//cfimap(action="createfolder", connection="myConnection", folder="temp");//ensure temp folder exists
cfimap(action="getall", connection="myConnection", name="allTestEmails") {//fetch the test emails
cfimapfilter(name="subject", value="cfimap mailmove test");
}
for(testEmail in allTestEmails) {//move each email to the temp folder
cfimap(action="movemail", connection="myConnection", uid=testEmail.uid, newFolder="temp");//see mail server logs show a new connection for each move (bad - all moves should share same session)
}
cfimap(action="close", connection="myConnection");
</cfscript>
Actual result: A new connection is created for each move.
Expected result: All moves should share the same connection.
----------------------------- Additional Watson Details -----------------------------
Watson Bug ID: 4146098
External Customer Info:
External Company:
External Customer Name: Aaron Neff
External Customer Email:
External Test Config: Verified on Windows 10 and Windows Server 2012 R2 in CF11 Update 7 (build 11,0,07,296330) and CF2016 (build 2016.0.01.298299).Attachments:
Comments: