4 ms·
How to exploit: For imap or smtp one can construct commands that will lead to a mail with the login credentials being sent to the attacker (assuming the attacke
by hannob 4y ago
How to exploit: For imap or smtp one can construct commands that will lead to a mail with the login credentials being sent to the attacker (assuming the attacker has an account on the same server). For POP3 we were unable to come up with such an attack, as it has no way of storing or sending mails.
- billpg 4y agoYep. While I did fix the bug as soon as I found it, I consider myself fortunate I chose POP3 to write my first server.