Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-02 Thread Marc Haber
tags #336979 security confirmed found #336979 4.50-8 thanks This also applies to sarge. Greetings Marc -- - Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things."

Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-02 Thread Marc Haber
On Wed, Nov 02, 2005 at 08:24:31AM +0100, Marc Haber wrote: > This code works, and since the exim wiki is more "official" as some > random web forum, I have modified the Debian package to now use this > example. http://svn.debian.org/wsvn/pkg-exim4/exim/trunk/debian/debconf/conf.d/auth/30_exim4-co

Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-01 Thread Marc Haber
tags #336979 confirmed security severity #336979 important thanks On Wed, Nov 02, 2005 at 01:37:35AM +0100, Peter Thomassen wrote: > When using plain_courier_authdaemon or login_courier_authdaemon > authentication, wrong passwords are accepted (but only correct > usernames). Ouch! > According to

Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-01 Thread Peter Thomassen
Package: exim4 Version: 4.54-1 Severity: normal When using plain_courier_authdaemon or login_courier_authdaemon authentication, wrong passwords are accepted (but only correct usernames). According to [1], this is Debian-specific. [1]: http://www.devco.net/archives/2004/06/10/smtp_auth_with_exi