[
https://issues.apache.org/jira/browse/JAMES-1504?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13644045#comment-13644045
]
Eric Charles commented on JAMES-1504:
-------------------------------------
I have committed the fix.
You will need to reinstall mailbox from trunk and rebuild server.
Or just wait from a snapshot to be built from the CI servers.
Thx again for reporting this issue,
Eric
> POP3 AUTHENTIFICATION
> ---------------------
>
> Key: JAMES-1504
> URL: https://issues.apache.org/jira/browse/JAMES-1504
> Project: James Server
> Issue Type: Bug
> Components: POP3Server
> Affects Versions: 3.0.0-beta5
> Environment: Windows 7,JDK7
> Reporter: 杨勐
> Priority: Critical
> Labels: security
> Attachments: screenshot-1.jpg, screenshot-2.jpg
>
>
> any user(even though it doesn't exist) with any password can login into
> james-3.0-beta5-snapshot and so can get any user's mail without password
> authentication..
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
