dovecot - Mar 2011 - STARTTLS MITM in Postfix

http://marc.info/?l=postfix-users&m=129952854117623&w=2

Dovecot doesn't have this bug. It discards all buffered data when STARTTLS
command runs.

(Why do I think I've heard about this bug before? Or at least the same type
of way to exploit it? Maybe there was another similarly exploitable bug.)

On 7.3.2011, at 22.35, Timo Sirainen wrote:
> (Why do I think I've heard about this bug before? Or at least the same
type of way to exploit it? Maybe there was another similarly exploitable bug.)
Oh, found it. Also from Wietse:
http://www.porcupine.org/postfix-mirror/smtp-renegotiate.pdf