Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-02 Thread Marc Haber
On Wed, Nov 02, 2005 at 08:24:31AM +0100, Marc Haber wrote: This code works, and since the exim wiki is more official as some random web forum, I have modified the Debian package to now use this example.

Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-02 Thread Marc Haber
tags #336979 security confirmed found #336979 4.50-8 thanks This also applies to sarge. Greetings Marc -- - Marc Haber | I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things.

Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-01 Thread Peter Thomassen
Package: exim4 Version: 4.54-1 Severity: normal When using plain_courier_authdaemon or login_courier_authdaemon authentication, wrong passwords are accepted (but only correct usernames). According to [1], this is Debian-specific. [1]:

Bug#336979: exim4: Using courier_authdaemon authentication accepts wrong passwords

2005-11-01 Thread Marc Haber
tags #336979 confirmed security severity #336979 important thanks On Wed, Nov 02, 2005 at 01:37:35AM +0100, Peter Thomassen wrote: When using plain_courier_authdaemon or login_courier_authdaemon authentication, wrong passwords are accepted (but only correct usernames). Ouch! According to