[Bug 48850] IMAP TLS with LOGIN authentication sends the login in cleartext

[Joaquin Seoane]

Public bug reported:

Binary package hint: evolution

This is the output on an strace:


recv(45, "* CAPABILITY IMAP4rev1 SORT THRE"..., 4095, 0) = 173
gettimeofday({1149688176, 80626}, NULL) = 0
poll([{fd=45, events=POLLOUT, revents=POLLOUT}, {fd=50, events=POLLIN}], 2, 240000) = 1
send(45, "B00013 STARTTLS\r\n", 17, 0)  = 17
gettimeofday({1149688176, 81034}, NULL) = 0
poll([{fd=45, events=POLLIN, revents=POLLIN}, {fd=50, events=POLLIN}], 2, 240000) = 1
recv(45, "B00013 OK Begin TLS negotiation "..., 4095, 0) = 38
gettimeofday({1149688176, 88761}, NULL) = 0
poll([{fd=45, events=POLLOUT, revents=POLLOUT}, {fd=50, events=POLLIN}], 2, 240000) = 1
send(45, "B00014 LOGIN pruebaco PASSWORD\r\n", 32, 0) = 32
gettimeofday({1149688176, 89190}, NULL) = 0
poll([{fd=45, events=POLLIN, revents=POLLIN|POLLERR|POLLHUP}, {fd=50, events=POLLIN}], 2, 240000) = 1
recv(45, 0x842a8a8, 4095, 0)            = -1 ECONNRESET (Connection reset by peer)

** Affects: evolution (Ubuntu)
     Importance: Untriaged
         Status: Unconfirmed

-- 
IMAP TLS with LOGIN authentication sends the login in cleartext
https://launchpad.net/bugs/48850