I believe this problem also exists in Hardy.  Following is a log message
that illustrates the issue:

Aug 14 12:34:57 ubuntumailsvr dovecot: auth(default): sql(***USERNAME
OMITTED***,127.0.0.1): CRYPT(trader) !=
'$1$crGRJM.l$WFcCPMqyDT1AB9gkkdnyN/

Using a PHP function, I can feed the password and hash in against the
CRYPT() function for a successful match.

-- 
Dovecot Plain auth broken in 1.1.1, fixed in 1.2.1
https://bugs.launchpad.net/bugs/398733
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to