Bugtraq: FTGate and POP3 protocol

[wizdumb () UNIX ZA NET (Andrew Lewis)]

Yeah, it's official - it's a problem with the POP3 protocol rather than
with FTGate specifically. Other affected daemons are gnu-pop3d,
Post.Office, Sendmail for NT, Cubic's Circle for Unix, etc etc.

Although returning a -ERR code when an inalid username is given *is* RFC
compliant, and that there is the delay feature to slow-down bruteforcing,
it's still a fairly stupid idea. :/

Cheers,
Andrew Lewis / Wizdumb

wizdumb () leet org
www.mdma.za.net/fk