[
https://issues.apache.org/jira/browse/JAMES-1504?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
杨勐 updated JAMES-1504:
----------------------
Component/s: (was: POP3Server)
SMTPServer
Description: Telnet mysmtpserver 25 may login with part match base64
encoded password. (was: any user(even though it doesn't exist) with any
password can login into james-3.0-beta5-snapshot and so can get any user's mail
without password authentication..)
> POP3 AUTHENTIFICATION
> ---------------------
>
> Key: JAMES-1504
> URL: https://issues.apache.org/jira/browse/JAMES-1504
> Project: James Server
> Issue Type: Bug
> Components: SMTPServer
> Affects Versions: 3.0.0-beta5
> Environment: Windows 7,JDK7
> Reporter: 杨勐
> Assignee: Eric Charles
> Priority: Critical
> Labels: security
> Fix For: 3.0.0-beta5
>
> Attachments: screenshot-1.jpg, screenshot-2.jpg
>
>
> Telnet mysmtpserver 25 may login with part match base64 encoded password.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org
