The affected module is evolution-data-server and the application affected is Evolution. I missed to mention this in my previous mail. My apologies for that.
Sankar On Wed, 2006-09-20 at 09:07 +0000, Sankar P wrote: > Hi, > > As part of fixing http://bugzilla.gnome.org/show_bug.cgi?id=350617 I > have attached a patch. > > Scenario: Some IMAP servers do not expect password to be sent in plain > text. This is set in the LOGINDISABLED property of an imap-response. > Evolution does not read this and sends the password in plain text if > secure-authentication has failed. > > Impact: Sending password in plain text in a network, where it is not > suggested is a vulnerability issue. > > Patch is at : > http://bugzilla.gnome.org/attachment.cgi?id=73075&action=view > > New string added is : > > Failed to connect to IMAP server <%s> in secure mode. And, Plain-text > password authentication is disabled in the server. > > I would like to commit this to Evolution 2.8 branch (gnome-2.16) . Can > someone review/approve this new string ? > > Sankar _______________________________________________ gnome-i18n mailing list gnome-i18n@gnome.org http://mail.gnome.org/mailman/listinfo/gnome-i18n