oss-sec mailing list archives

CVE request: claws-mail vcalendar plugin stores user/password in cleartext

From: "Vincent Danen" <vdanen () redhat com>
Date: Mon, 10 Mar 2014 14:31:34 -0600

Subject pretty much says it all.  It's not a very exciting flaw but was brought to our attention.

References:

http://www.thewildbeast.co.uk/claws-mail/bugzilla/show_bug.cgi?id=3099
https://bugzilla.redhat.com/show_bug.cgi?id=1074683

-- 
Vincent Danen / Red Hat Security Response Team

Attachment: signature.asc
Description: OpenPGP digital signature

Current thread:

CVE request: claws-mail vcalendar plugin stores user/password in cleartext Vincent Danen (Mar 10)
- Re: CVE request: claws-mail vcalendar plugin stores user/password in cleartext Paul (Mar 12)
  - Re: Re: CVE request: claws-mail vcalendar plugin stores user/password in cleartext Marcus Meissner (Mar 12)
    - Re: Re: CVE request: claws-mail vcalendar plugin stores user/password in cleartext Michael Samuel (Mar 12)
    - Re: CVE request: claws-mail vcalendar plugin stores user/password in cleartext cve-assign (Mar 21)
    - Re: Re: CVE request: claws-mail vcalendar plugin stores user/password in cleartext Michael Samuel (Mar 22)