[Bug 1194892] Re: pop3 and imap tls plaintext command injection
** Changed in: courier (Debian) Status: Unknown => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1194892 Title: pop3 and imap tls plaintext command injection To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1194892/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1194892] Re: pop3 and imap tls plaintext command injection
** Bug watch added: Debian Bug tracker #989375 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989375 ** Also affects: courier (Debian) via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989375 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1194892 Title: pop3 and imap tls plaintext command injection To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1194892/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1194892] Re: pop3 and imap tls plaintext command injection
CVE-2021-38084 seems to be assigned for this issue. ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-38084 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1194892 Title: pop3 and imap tls plaintext command injection To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1194892/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1194892] Re: pop3 and imap tls plaintext command injection
Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: courier (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1194892 Title: pop3 and imap tls plaintext command injection To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1194892/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1194892] Re: pop3 and imap tls plaintext command injection
I was just able to reproduce this flaw with courier 0.66.1-1ubuntu4. There was a discussion on this issue on the courier mailing list providing some good insights: http://sourceforge.net/p/courier/mailman/message/3151/ If I understand that thread right this bug can be set to low importance or even be closed. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1194892 Title: pop3 and imap tls plaintext command injection To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1194892/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1194892] Re: pop3 and imap tls plaintext command injection
** Tags added: quantal -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1194892 Title: pop3 and imap tls plaintext command injection To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/courier/+bug/1194892/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
