DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: http://bugs.horde.org/ticket/10450
------------------------------------------------------------------------------
Ticket | 10450
Updated By | Michael Slusarz <slusarz at horde.org>
Summary | POP3 empty maillist + can login with wrong password or
| username
Queue | IMP
Version | 5.0.10
Type | Bug
-State | Assigned
+State | Resolved
Priority | 2. Medium
Milestone |
Patch |
Owners | Michael Slusarz
------------------------------------------------------------------------------
Michael Slusarz <slusarz at horde.org> (2011-08-23 16:26) wrote:
> Now i cannot see any mail in the folder after the pop3 connect and i
> can login with wrong password too.
> I the IMP i get the following Error Message:
> Lesen der Ordnerliste fehlgeschlagen: Server search not supported on
> POP3 server.
Fixed. A regression from fixing Bug #10424.
> wrong username but can login:
> ------------------------------
> S (1314020367,47): +OK Hello there.
> C (1314020367,47): CAPA
> S (1314020367,5): +OK Here's what I can do:
> S (1314020367,5): SASL PLAIN LOGIN CRAM-MD5 CRAM-SHA1 CRAM-SHA256
> S (1314020367,5): TOP
> S (1314020367,5): USER
> S (1314020367,5): LOGIN-DELAY 10
> S (1314020367,5): PIPELINING
> S (1314020367,5): UIDL
> S (1314020367,5): IMPLEMENTATION Courier Mail Server
> S (1314020367,5): .
> C (1314020367,51): [AUTH PLAIN Command - username: test at ecample.com]
> S (1314020372,54): -ERR Authentication failed.
> C (1314020372,54): AUTH LOGIN
> S (1314020372,57): + VXNlcm5hbWU6
> C (1314020372,57): dGVzdEBlY2FtcGxlLmNvbQ==
> S (1314020372,6): + UGFzc3dvcmQ6
> C (1314020372,6): [AUTH LOGIN Command - password]
> S (1314020377,65): -ERR Authentication failed.
> C (1314020377,65): AUTH CRAM-MD5
> S (1314020377,67): + PDk1NjA1QzM1MTY1Mjg1NTk4RTVGMEVEODc5NzFDQjRCQG1haWwyMT4=
> C (1314020377,67): [CRAM-MD5 Response]
> S (1314020382,7): -ERR Authentication failed.
> C (1314020382,72): QUIT
> S (1314020382,74): +OK Better luck next time.
Definitely can't reproduce this. And this log proves that
authentication failed.