You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Benoit Tellier (Jira)" <se...@james.apache.org> on 2021/09/04 10:00:02 UTC
[jira] [Closed] (JAMES-1505) Imprecise SMTP authentication
[ https://issues.apache.org/jira/browse/JAMES-1505?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Benoit Tellier closed JAMES-1505.
---------------------------------
Resolution: Cannot Reproduce
I verified.
{code:java}
$ telnet 172.17.0.2 25
Trying 172.17.0.2...
Connected to 172.17.0.2.
Escape character is '^]'.
220 Apache JAMES awesome SMTP Server
auth login
334 VXNlcm5hbWU6
Ym9iQGxvY2FsaG9zdA==
334 UGFzc3dvcmQ6
MTIzNDU=\erhoerhver
501 Could not decode parameters for AUTH LOGIN
{code}
Not affected any longer?
> Imprecise SMTP authentication
> -----------------------------
>
> Key: JAMES-1505
> URL: https://issues.apache.org/jira/browse/JAMES-1505
> Project: James Server
> Issue Type: Bug
> Components: SMTPServer
> Affects Versions: 3.0.0-beta5
> Environment: Windows 8,JDK7U17
> Reporter: Xiangrui Meng
> Priority: Major
> Labels: features
> Attachments: smtpauth..jpg
>
>
> users can log in with right base64 encoded username and base64 encoded password plus any string.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org