diff options
| author | Matthias Andree <matthias.andree@gmx.de> | 2007-01-04 20:32:27 +0000 |
|---|---|---|
| committer | Matthias Andree <matthias.andree@gmx.de> | 2007-01-04 20:32:27 +0000 |
| commit | a2071dd3b863de1a2688b1dad4aa4121eab1ac4d (patch) | |
| tree | 30e47f79e188cdf968688fd9c12dae88793d081a /fetchmail-SA-2006-02.txt | |
| parent | ac0ea50cfbbcaaf23b64dbbb70a17c15afcd5c15 (diff) | |
| download | fetchmail-a2071dd3b863de1a2688b1dad4aa4121eab1ac4d.tar.gz fetchmail-a2071dd3b863de1a2688b1dad4aa4121eab1ac4d.tar.bz2 fetchmail-a2071dd3b863de1a2688b1dad4aa4121eab1ac4d.zip | |
r5009@balu: mandree | 2007-01-04 00:25:10 +0100
Update.
svn path=/branches/BRANCH_6-3/; revision=5006
Diffstat (limited to 'fetchmail-SA-2006-02.txt')
| -rw-r--r-- | fetchmail-SA-2006-02.txt | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/fetchmail-SA-2006-02.txt b/fetchmail-SA-2006-02.txt index 05a9a8f0..dd24e497 100644 --- a/fetchmail-SA-2006-02.txt +++ b/fetchmail-SA-2006-02.txt @@ -3,8 +3,8 @@ fetchmail-SA-2006-02: TLS enforcement problem/MITM attack/password exposure Topics: fetchmail cannot enforce TLS Author: Matthias Andree -Version: XXX -Announced: 2006-11-XX +Version: 1.0 +Announced: 2007-01-04 Type: secret information disclosure Impact: fetchmail can expose cleartext password over unsecure link fetchmail may not detect man in the middle attacks @@ -17,7 +17,7 @@ Project URL: http://fetchmail.berlios.de/ Affects: fetchmail releases <= 6.3.5 fetchmail release candidates 6.3.6-rc1, -rc2, -rc3 -Not affected: fetchmail release candidate 6.3.6-rc4 +Not affected: fetchmail release candidates 6.3.6-rc4, -rc5 fetchmail release 6.3.6 Corrected: 2006-11-26 fetchmail 6.3.6-rc4 @@ -29,6 +29,7 @@ Corrected: 2006-11-26 fetchmail 6.3.6-rc4 2006-11-16 v0.01 internal review draft 2006-11-26 v0.02 revise failure cases, workaround, add acknowledgments 2006-11-27 v0.03 add more vulnerabilities +2006-01-04 v1.0 ready for release 1. Background @@ -101,7 +102,7 @@ them right. A. Copyright, License and Warranty ================================== -(C) Copyright 2006 by Matthias Andree, <matthias.andree@gmx.de>. +(C) Copyright 2007 by Matthias Andree, <matthias.andree@gmx.de>. Some rights reserved. This work is licensed under the Creative Commons |