Although logged as SA_ADMIN user cannot get user_info from oter domains. Here is a patch:
--- vpopmail-5.5.2-orig/vpopmaild.c Tue Apr 6 01:03:22 2004 +++ vpopmail-5.5.2/vpopmaild.c Tue Apr 6 16:47:50 2004 @@ -563,7 +563,7 @@ return(-1); } - if ( (AuthVpw.pw_gid&QA_ADMIN) && (strcmp(TheDomain,TmpDomain))!=0 ) { + if ( ((AuthVpw.pw_gid & QA_ADMIN) && (strcmp(TheDomain,TmpDomain))!=0) && !(AuthVpw.pw_gid & SA_ADMIN) ) { snprintf(WriteBuf,sizeof(WriteBuf), RET_ERR "XXX not authorized for domain\n"); return(-1); BTW. Since vpopmaild is very young it will need a heavy develoopment. It would be resonable to create a separate category in bugtraq. Solt