> Yes, if you have Eudora 4.3 and you use SMTP AUTH, you will
> reproduce this.
Well, I downloaded Eudora 4.3.1 and couldn't get this problem to occur.
Eudora 4.3.1 will properly not use CRAM-MD5, since IMail says it doesn't
accept CRAM-MD5 (is there a way to get it to accept it? the SMTPD32.EXE file
does have a string that claims that it allows CRAM-MD5, and IMail docs say
it is supported in SMTP).
Is Eudora 4.3 different from 4.3.1, and if so, is there somewhere where it
can be downloaded? Does anyone know how this can be reproduced without
Eudora (what commands to send)? This is starting to sound like an urban
legend, but if there truly is a vulnerability, I'd like to know about it.
-Scott
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
