Re: Evolution String break request



The affected module is evolution-data-server and the application
affected is Evolution. I missed to mention this in my previous mail. My
apologies for that.

Sankar

On Wed, 2006-09-20 at 09:07 +0000, Sankar P wrote:
> Hi,
> 
> As part of fixing http://bugzilla.gnome.org/show_bug.cgi?id=350617 I
> have attached a patch. 
> 
> Scenario: Some IMAP servers do not expect password to be sent in plain
> text. This is set in the LOGINDISABLED property of an imap-response.
> Evolution does not read this and sends the password in plain text if
> secure-authentication has failed.
> 
> Impact: Sending password in plain text in a network, where it is not
> suggested is a vulnerability issue.
> 
> Patch is at :
> http://bugzilla.gnome.org/attachment.cgi?id=73075&action=view 
> 
> New string added is : 
> 
> Failed to connect to IMAP server <%s> in secure mode. And, Plain-text
> password authentication is disabled in the server.
> 
> I would like to commit this to Evolution 2.8 branch (gnome-2.16) . Can
> someone review/approve this new string ?
> 
> Sankar



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]