Bugtraq: Re: FTGate and POP3 protocol

[roger () FIREDRAKE ORG (Roger Burton West)]

On Sun, Jul 02, 2000 at 03:27:30PM +0200, Andrew Lewis wrote:
> Yeah, it's official - it's a problem with the POP3 protocol rather than
> with FTGate specifically. Other affected daemons are gnu-pop3d,
> Post.Office, Sendmail for NT, Cubic's Circle for Unix, etc etc.
                               ^^^^^^^^^^^^^^^^^^^^^^^

I don't believe this is the case.

With a valid user:

+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <064a0000a4a35f39 () febrile>
user roger
+OK roger selected
pass 12345
-ERR cucipop: Invalid password or username (check case)

With an invalid user:

+OK Cubic Circle's v1.31 1998/05/13 POP3 ready <054a0000a4a35f39 () febrile>
user zarquon
+OK zarquon selected
pass 12345
-ERR cucipop: Invalid password or username (check case)

Roger

--
Roger Burton West -/- roger () firedrake org
Not speaking for my employers or even telling you who they are