Bugtraq: Re: FTGate and POP3 protocol

From: Roger Burton West <roger_at_FIREDRAKE.ORG>
Date: Sun, 2 Jul 2000 21:21:51 +0100

On Sun, Jul 02, 2000 at 03:27:30PM +0200, Andrew Lewis wrote:
>Yeah, it's official - it's a problem with the POP3 protocol rather than
>with FTGate specifically. Other affected daemons are gnu-pop3d,
>Post.Office, Sendmail for NT, Cubic's Circle for Unix, etc etc.
^^^^^^^^^^^^^^^^^^^^^^^

I don't believe this is the case.

With a valid user:

+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <064a0000a4a35f39_at_febrile>
user roger
+OK roger selected
pass 12345
-ERR cucipop: Invalid password or username (check case)

With an invalid user:

+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <054a0000a4a35f39_at_febrile>
user zarquon
+OK zarquon selected
pass 12345
-ERR cucipop: Invalid password or username (check case)

Roger

--
Roger Burton West -/- roger_at_firedrake.org
Not speaking for my employers or even telling you who they are

Received on Jul 05 2000