Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dangerous missing error handling in auth code #18

Open
TimWolla opened this issue Jan 31, 2016 · 0 comments
Open

Dangerous missing error handling in auth code #18

TimWolla opened this issue Jan 31, 2016 · 0 comments

Comments

@TimWolla
Copy link

My mail server accepts AUTH only after STARTSSL and replies with 530 5.7.0 Must issue a STARTTLS command first otherwise. But this error message is ignored in sendCommand, which leads to the library happily continue sending the username and password over the wire in plaintext, which will be interpreted as commands, leading to: 502 5.5.2 Error: command not recognized.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant