Bug#887840: Otrs blocks on receipt of a mail with too long headers

[Alain Knaff]

Package: otrs2
Version: 3.3.18-1+deb8u4

Hi,

Recently a spammer sent a mail to our otrs address with way too many
recipients in To: and Cc:. This had the effect of completely stalling
otrs' mail processing. Rather than just skip over this faulty mail, and
move on to the other mails, the postmaster task just crashed. From then
on failed to process any mails, until we manually deleted this mail from
OTRS' imap mailbox.

Attached is the error message sent by otrs (2250.empl), as well as the
faulty mail that triggered this mess (marques.eml).

Thanks,

Alain

--- Begin Message ---

---------- Message transféré ----------
De : Filipe Marques <filipeleb...@gmail.com>
Date : 7 novembre 2017 à 11:44
Objet : Pour votre information.SMARTMETER.
À :
Cc : Ville de Dudelange <vi...@dudelange.lu>, Ville de Dudelange - Maison
relais <maison.rel...@dudelange.lu>, loris.sp...@dudelange.lu,
rene.mandersch...@dudelange.lu, dan.biancal...@dudelange.lu,
ecolo...@dudelange.lu, mediat...@dudelange.lu, "patrick.h...@dudelange.lu" <
patrick.h...@dudelange.lu>, "francine.zigli...@dudelange.lu" <
francine.zigli...@dudelange.lu>, Sarah Pétré <sarah.pe...@dudelange.lu>, "
dorothee.con...@dudelange.lu" <dorothee.con...@dudelange.lu>, "
melanie.ar...@dudelange.lu" <melanie.ar...@dudelange.lu>, "
danielle.ign...@dudelange.lu" <danielle.ign...@dudelange.lu>, François
Olivieri <francois.olivi...@dudelange.lu>, "victormatiasc...@dudelange.lu" <
victormatiasc...@dudelange.lu>, "guy.net...@dudelange.lu" <
guy.net...@dudelange.lu>, Alexis Cardoso <alexis.card...@dudelange.lu>, "
tom.bern...@dudelange.lu" <tom.bern...@dudelange.lu>, "
claire.dum...@dudelange.lu" <claire.dum...@dudelange.lu>, "
diogo.co...@dudelange.lu" <diogo.co...@dudelange.lu>, "
roby.goer...@dudelange.lu" <roby.goer...@dudelange.lu>, "
paulo.lo...@dudelange.lu" <paulo.lo...@dudelange.lu>, "
circulat...@dudelange.lu" <circulat...@dudelange.lu>, "
gilber.l...@dudelange.lu" <gilber.l...@dudelange.lu>, "
sabatino.sp...@dudelange.lu" <sabatino.sp...@dudelange.lu>, "
dudela...@flammang.lu" <dudela...@flammang.lu>, "serge.b...@dudelange.lu" <
serge.b...@dudelange.lu>, "claudia.dallagn...@dudelange.lu" <
claudia.dallagn...@dudelange.lu>, "chantal.nil...@dudelange.lu" <
chantal.nil...@dudelange.lu>, "jeanette.sin...@dudelange.lu" <
jeanette.sin...@dudelange.lu>, "annecaroleh...@dudelange.lu" <
annecaroleh...@dudelange.lu>, "michele.scha...@dudelange.lu" <
michele.scha...@dudelange.lu>, "manon.h...@dudelange.lu" <
manon.h...@dudelange.lu>, "muriel.hom...@dudelange.lu" <
muriel.hom...@dudelange.lu>, "tamara.monace...@dudelange.lu" <
tamara.monace...@dudelange.lu>, Nic krumlovsky <nic.krumlov...@dudelange.lu>,
"alain.pal...@dudelange.lu" <alain.pal...@dudelange.lu>, "
jose.fav...@dudelange.lu" <jose.fav...@dudelange.lu>, "
carly.bo...@dudelange.lu" <carly.bo...@dudelange.lu>, "
pascal.capit...@dudelange.lu" <pascal.capit...@dudelange.lu>, "
veronique.str...@dudelange.lu" <veronique.str...@dudelange.lu>, "
jeannette.sin...@dudelange.lu" <jeannette.sin...@dudelange.lu>, "
tatjana.greffr...@dudelange.lu" <tatjana.greffr...@dudelange.lu>, "
henri.glese...@dudelange.lu" <henri.glese...@dudelange.lu>, "
chistian.we...@dudelange.lu" <chistian.we...@dudelange.lu>, "
bibliothe...@dudelange.lu" <bibliothe...@dudelange.lu>, "
sven.loschei...@dudelange.lu" <sven.loschei...@dudelange.lu>, "
frank.c...@dudelange.lu" <frank.c...@dudelange.lu>, "
mandy.kre...@dudelange.lu" <mandy.kre...@dudelange.lu>, "
alain.b...@dudelange.lu" <alain.b...@dudelange.lu>, "
mayriam.ham...@dudelange.lu" <mayriam.ham...@dudelange.lu>, "
cult...@dudelange.lu" <cult...@dudelange.lu>, "sandy.b...@dudelange.lu" <
sandy.b...@dudelange.lu>, "marco.th...@dudelange.lu" <
marco.th...@dudelange.lu>, "nicole.arensd...@dudelange.lu" <
nicole.arensd...@dudelange.lu>, "robert.bigdow...@dudelange.lu" <
robert.bigdow...@dudelange.lu>, "daniel.welli...@dudelange.lu" <
daniel.welli...@dudelange.lu>, "myriam.kel...@dudelange.lu" <
myriam.kel...@dudelange.lu>, "natascha.pier...@dudelange.lu" <
natascha.pier...@dudelange.lu>, "julia.recktenw...@dudelange.lu" <
julia.recktenw...@dudelange.lu>, "gilbert.l...@dudelange.lu" <
gilbert.l...@dudelange.lu>, "nadine.gr...@dudelange.lu" <
nadine.gr...@dudelange.lu>, "veronique.her...@dudelange.lu" <
veronique.her...@dudelange.lu>, "biergerfo...@dudelange.lu" <
biergerfo...@dudelange.lu>, "josiane.piki...@dudelange.lu" <
josiane.piki...@dudelange.lu>, "cipa.dudela...@servior.lu" <
cipa.dudela...@servior.lu>, "romain.zeim...@dudelange.lu" <
romain.zeim...@dudelange.lu>, "patrick.capit...@dudelange.lu" <
patrick.capit...@dudelange.lu>, "romain.zu...@dudelange.lu" <
romain.zu...@dudelange.lu>, Claude Tritz <claude.tr...@dudelange.lu>, "
annabellelaboriersaf...@dudelange.lu" <annabellelaboriersaf...@dudelange.lu>


http://www.chd.lu/wps/portal/public/Accueil/TravailALaChambre/Recherche/
RoleDesAffaires?action=doQuestpaDetails&id=15846

--- End Message ---

--- Begin Message ---

DBD::Pg::db do failed: ERROR:  value too long for type character varying(3800) 
at /usr/share/otrs/Kernel/System/DB.pm line 494.
ERROR: OTRS-otrs.PostMasterMailbox.pl-10 Perl: 5.20.2 OS: linux Time: Wed Jan 
17 17:50:01 2018

 Message: ERROR:  value too long for type character varying(3800), SQL: 'INSERT 
INTO article (ticket_id, article_type_id, article_sender_type_id, a_from, 
a_reply_to, a_to, a_cc, a_subject, a_message_id, a_message_id_md5, 
a_in_reply_to, a_references, a_body, a_content_type, content_path, valid_id, 
incoming_time, create_time, create_by, change_time, change_by) VALUES (?, ?, ?, 
?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 
        '2018-01-17 17:50:01'
    , ?, 
        '2018-01-17 17:50:01'
    , ?)'

 Traceback (18618): 
   Module: Kernel::System::Ticket::Article::ArticleCreate (OTRS 3.3.18) Line: 
275
   Module: Kernel::System::PostMaster::NewTicket::Run (OTRS 3.3.18) Line: 374
   Module: Kernel::System::PostMaster::Run (OTRS 3.3.18) Line: 393
   Module: Kernel::System::MailAccount::IMAPTLS::_Fetch (OTRS 3.3.18) Line: 219
   Module: Kernel::System::MailAccount::IMAPTLS::Fetch (OTRS 3.3.18) Line: 77
   Module: Kernel::System::MailAccount::MailAccountFetch (OTRS 3.3.18) Line: 450
   Module: main::Fetch (unknown version) Line: 176
   Module: /usr/share/otrs/bin/otrs.PostMasterMailbox.pl (unknown version) 
Line: 89

ERROR: OTRS-otrs.PostMasterMailbox.pl-10 Perl: 5.20.2 OS: linux Time: Wed Jan 
17 17:50:01 2018

 Message: Can't process email with MessageID 
<<CANE_C=bwStKU=-Si3YFyB+b5-tFw=nop7ue6m2fzzfvqnf0...@mail.gmail.com>>! Please 
create a bug report with this email (From: Filipe Marques 
<filipeleb...@gmail.com>, Located under var/spool/problem-email*) on 
http://bugs.otrs.org/!

 Traceback (18618): 
   Module: Kernel::System::PostMaster::NewTicket::Run (OTRS 3.3.18) Line: 402
   Module: Kernel::System::PostMaster::Run (OTRS 3.3.18) Line: 393
   Module: Kernel::System::MailAccount::IMAPTLS::_Fetch (OTRS 3.3.18) Line: 219
   Module: Kernel::System::MailAccount::IMAPTLS::Fetch (OTRS 3.3.18) Line: 77
   Module: Kernel::System::MailAccount::MailAccountFetch (OTRS 3.3.18) Line: 450
   Module: main::Fetch (unknown version) Line: 176
   Module: /usr/share/otrs/bin/otrs.PostMasterMailbox.pl (unknown version) 
Line: 89

Can't locate object method "get" via package "Mail::IMAPClient" at 
/usr/share/otrs/Kernel/System/MailAccount/IMAPTLS.pm line 221.

--- End Message ---