[15636] in bugtraq
Re: FTGate and POP3 protocol
daemon@ATHENA.MIT.EDU (Roger Burton West)
Wed Jul 5 19:00:05 2000
Mail-Followup-To: Roger Burton West <roger@firedrake.org>,
BUGTRAQ@SECURITYFOCUS.COM
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Message-Id: <20000702212151.A16361@refractory.firedrake.org>
Date: Sun, 2 Jul 2000 21:21:51 +0100
Reply-To: Roger Burton West <roger@FIREDRAKE.ORG>
From: Roger Burton West <roger@FIREDRAKE.ORG>
To: BUGTRAQ@SECURITYFOCUS.COM
In-Reply-To: <Pine.BSF.4.10.10007021523290.45406-100000@unix.za.net>; from
wizdumb@UNIX.ZA.NET on Sun, Jul 02, 2000 at 03:27:30PM +0200
On Sun, Jul 02, 2000 at 03:27:30PM +0200, Andrew Lewis wrote:
>Yeah, it's official - it's a problem with the POP3 protocol rather than
>with FTGate specifically. Other affected daemons are gnu-pop3d,
>Post.Office, Sendmail for NT, Cubic's Circle for Unix, etc etc.
^^^^^^^^^^^^^^^^^^^^^^^
I don't believe this is the case.
With a valid user:
+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <064a0000a4a35f39@febrile>
user roger
+OK roger selected
pass 12345
-ERR cucipop: Invalid password or username (check case)
With an invalid user:
+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <054a0000a4a35f39@febrile>
user zarquon
+OK zarquon selected
pass 12345
-ERR cucipop: Invalid password or username (check case)
Roger
--
Roger Burton West -/- roger@firedrake.org
Not speaking for my employers or even telling you who they are
