Project

General

Profile

Bug #322

STARTTLS can be stripped and Sylpheed will proceed in plaintext leaking the user credentials.

Added by Damian Poddebniak over 2 years ago. Updated 8 days ago.

Status:
New
Priority:
High
Assignee:
-
Category:
Security
Target version:
Start date:
05/30/2020
Due date:
% Done:

0%

Estimated time:

Description

Configure an IMAP server such that Sylpheed can connect via STARTTLS. When an attacker strips the STARTTLS capability from the server greeting and the response to the capability command, Sylpheed will not issue the STARTTLS command anymore and proceed with the login in plaintext.

#1

Updated by Damian Poddebniak almost 2 years ago

As this issue has not been assigned for over 8 months, I wondered if this is recognized as a security issue?

#2

Updated by Bogisich Gaston over 1 year ago

Damian Poddebniak wrote:

As this issue has not been assigned for over 8 months, I wondered if this is recognized as a security issue?

I am also facing exact same issue. Is your issue resloved? any recommendation how to solve this issue.? Can any one please help?

https://www.myfordbenefits.us/

#3

Updated by john bond about 1 year ago

Interesting topic for a blog. I have been searching the Internet for fun and came upon your website. Fabulous post. Thanks a ton for sharing your knowledge! It is great to see that some people still put in an effort into managing their websites. I'll be sure to check back again real soon.
https://abbicare.com.au/
https://www.miningbusiness.net/
https://getweightfast.com

#4

Updated by replica watches 9 months ago

https://www.bestwatchaaa.com/Ebel-replica.html replica https://www.hotwatchsreplica.com/Ulysse-Nardin.html https://www.bestwatchss.com/Glashutte-Replica-Watches.html https://www.bestwatchss.com/A-Lange-Sohne-Replica-Watches.html https://www.replicawatchsshop.cc/Corum-Replica.html are https://www.replicawatchsshop.cc/Piaget-Replica.html https://www.hotwatchsreplica.com/Zenith.html https://www.hotwatchsreplica.com/Panerai.html https://www.hotwatchsreplica.com/IWC.html https://www.replicawatchsshop.cc/Girard-Perregaux-Replica.html https://www.luxuryshopwatch.com/ https://www.bestwatchaaa.com/Jaeger-LeCoultre-replica.html https://www.hotwatchsreplica.com/Hermes.html online https://www.bestwatchss.com/SevenFriday-Replica-Watches.html https://www.allshopwatch.com/Arnold-Son-a-hot.html https://www.hotwatchsreplica.com/Corum.html https://www.allshopwatch.com/Gevril-a-hot.html https://www.bestwatchss.com/IWC-Replica-Watches.html http://www.classicwatchess.com/ https://www.bestwatchaaa.com/U-Boat-replica.html https://www.bestwatchaaa.com/Patek-Philippe-replica.html https://www.bestwatchaaa.com/Bell-Ross-replica.html price https://www.replicawatchsshop.cc/Breitling-Replica.html https://www.allshopwatch.com/Audemars-Piguet-a-hot.html https://www.hotwatchsreplica.com/Hublot.html https://www.hotwatchsreplica.com/Anonimo.html https://www.bestwatchaaa.com/Corum-replica.html https://www.hotwatchsreplica.com/MontBlanc.html https://www.bestwatchss.com/Alain-Silberstein-Replica-Watches.html https://www.bestwatchss.com/Zenith-Replica-Watches.html https://www.allshopwatch.com/A.-Lange-Sohne-a-hot.html https://www.hotwatchsreplica.com/ https://www.replicawatchsshop.cc/ https://www.bestwatchaaa.com/Glashutte-Original-replica.html https://www.bestwatchaaa.com/Breguet-replica.html similar https://www.allshopwatch.com/Movado-a-hot.html the https://www.hotwatchsreplica.com/girard-perregaux.html ones.

#5

Updated by seo mind 8 days ago

This was among the best posts and episode from your team it let me learn many new things. Scam Risk

#6

Updated by seo mind 8 days ago

This is a good post. This post gives truly quality information. I’m definitely going to look into it. Really very useful tips are provided here. Thank you so much. Keep up the good works Scam Risk

#7

Updated by seo mind 8 days ago

Easily, the article is actually the best topic on this registry related issue. I fit in with your conclusions and will eagerly look forward to your next updates. Just saying thanks will not just be sufficient, for the fantasti c lucidity in your writing. I will instantly grab your rss feed to stay informed of any updates. Scam Risk

#8

Updated by seo mind 8 days ago

This is very useful post for me. This will absolutely going to help me in my project. Scam Risk

#9

Updated by seo mind 8 days ago

I can set up my new idea from this post. It gives in depth information. Thanks for this valuable information for all,.. Scam Risk

#10

Updated by seo mind 8 days ago

All the contents you mentioned in post is too good and can be very useful. I will keep it in mind, thanks for sharing the information keep updating, looking forward for more posts.Thanks Scam Risk

#11

Updated by seo mind 8 days ago

Very informative post ! There is a lot of information here that can help any business get started with a successful social networking campaign ! Scam Risk

#12

Updated by seo mind 8 days ago

I like viewing web sites which comprehend the price of delivering the excellent useful resource free of charge. I truly adored reading your posting. Thank you! Scam Risk

#13

Updated by seo mind 8 days ago

They're produced by the very best degree developers who will be distinguished for your polo dress creating. You'll find polo Ron Lauren inside exclusive array which include particular classes for men, women. Scam Risk

Also available in: Atom PDF