UW-imapd CRAM-MD5 Authentication Bypass

Binary data 2568.prm...

Non-MD5 Authenticated BGP Connections (CAN-2004-0230; CAN-2004-0589)

...

Apache Httpd < 1.3.31 : mod_digest nonce checking

moddigest does not properly verify the nonce of a client response by using a AuthNonce secret. This could allow a malicious user who is able to sniff network traffic to conduct a replay attack against a website using Digest protection. Note that moddigest implements an older version of the MD5...

Re: IMAIL &#40;Ipswitch&#41; DoS with Eudora &#40;Qualcomm&#41;

I'm the lead developer for Windows Eudora here at Qualcomm, and I've been the one who has investigated these issues of SMTP authentication with IPSwitch's IMail server. Here's some details that may be helpful for IMail users: The problem is with IMail SMTP server versions 6.02 and below. When the...