Package: nmh Version: 1.7.1-2+deb8u1 Severity: serious No matter which password is entered, inc will always send the password string "(null)" to the server, thus failing authentication.
It is easily reproducible on fresh installs: First emulate a POP3 server using socat: $ socat TCP4-LISTEN:5555,reuseaddr=1,bind=127.0.0.1 - Initialize nmh: /usr/bin/mh/install-mh Run the include program: /usr/bin/mh/inc -host 127.0.0.1 -user test -port 5555 While inc is running, switch to the "socat" process and enter single lines so that "socat" data looks like that: +OK POP3 service ready USER test +OK PASS (null) No matter which password was used, always "PASS (null)" is sent to server.
