search for: capability_bann

...4b85c08ec329cf1be7ba61f # Parent 88a6a193e2884ac882ecc75e9ae9a242acc6188f Add X-REFERENCES2 to CAPABILITY string. diff -r 88a6a193e288 -r 1f082281f8d4 configure.in --- a/configure.in Sun Oct 26 16:30:50 2008 +0200 +++ b/configure.in Sun Oct 26 15:37:23 2008 -0600 @@ -2390,7 +2390,7 @@ dnl ** capability_banner="IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE" -capability="$capability_banner SORT THREAD=REFERENCES MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH SEARCHRES WITHIN CONTEXT=SEARCH" +capability="$capabi...

> Network Working Group M. Gahrns > Request for Comments: 2221 Microsoft > Category: Standards Track October 1997 > > IMAP4 Login Referrals ... > 6. Security Considerations > > The IMAP4 login referral mechanism makes use of IMAP URLs, and as > such, have the same security considerations as general

...clients are known to support login referrals: > > * Pine > * Outlook (but not Outlook Express) We use neither. > Login referrals are used only if the proxy field isn't set. We want neither LOGIN-REFERRALS nor proxy. Dovecot's configure includes the following by default: > capability_banner="IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID > ENABLE IDLE" If the extension is simply hidden from the banner, an attacker could still use the extension. If one removes the string from the banner above, one merely hides the extension name in the banner, or also disables the ext...

...rrals: >> >> * Pine >> * Outlook (but not Outlook Express) > We use neither. >> Login referrals are used only if the proxy field isn't set. > We want neither LOGIN-REFERRALS nor proxy. > > Dovecot's configure includes the following by default: >> capability_banner="IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID >> ENABLE IDLE" > If the extension is simply hidden from the banner, an attacker could > still use the extension. If the connection is SSL/TLS encrypted, the attacker can't add/modify login referrals. If it's not encryp...

...FTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF + SUCH DAMAGE. diff -Nur dovecot-1.2.11/configure dovecot-1.2.11+lemonade/configure --- dovecot-1.2.11/configure 2010-03-08 11:31:05.000000000 -0600 +++ dovecot-1.2.11+lemonade/configure 2010-04-08 09:59:12.000000000 -0500 @@ -23068,7 +23068,7 @@ capability_banner="IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE" -capability="$capability_banner SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST...