Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

server does not support RFC 5746, see CVE-2009-3555

644 views
Skip to first unread message

rhow...@gmail.com

unread,
Oct 25, 2010, 11:23:48 AM10/25/10
to
My mail server is Courier IMAP. I get this error message using
Thunderbird 3.1.4,. I can send and receive mail but sent mail is not
saved in my server folders. Has anyone else got this problem?
I'd be grateful for any suggestions.
-Roger

Mike Easter

unread,
Oct 25, 2010, 12:09:59 PM10/25/10
to
rhow...@googlemail.com wrote:
> My mail server is Courier IMAP. I get this error message

"server does not support RFC 5746, see CVE-2009-3555"

5746 is about TLS ie SSL/TLS http://www.ietf.org/rfc/rfc5746.txt

CVE is common vulnerabilities and exposures
CVE-2009-3555 is about the TLS 'problem' sometimes referred as the
'Project Mogul' issue.

The current v. of courier is courier-0.65.1.20101011 -- what v. is yours?

The current v. of courier imap module is courier-imap-4.8.1 -- what v.
is yours?

> using
> Thunderbird 3.1.4,.

That is Tbird telling you about your Courier's problem in its
configuration or version re the TLS business above.

> I can send and receive mail but sent mail is not
> saved in my server folders.

That problem is unrelated to the above, more like how courier's IMAP is
implemented. See courier docs.

> Has anyone else got this problem?

These are actually problems related to your courier server. Where do you
get support for that?

If you want to read more about the alert:

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3555
http://www.mozilla.org/security/announce/2010/mfsa2010-22.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

... and there are lots and lots more links at those links.

Courier docs http://www.courier-mta.org/documentation.html

--
Mike Easter

Mike Easter

unread,
Oct 25, 2010, 12:35:43 PM10/25/10
to
Mike Easter wrote:

> CVE-2009-3555 is about the TLS 'problem' sometimes referred as the
> 'Project Mogul' issue.

This Project Mogul http://lwn.net/Articles/362234/ November 18, 2009 --
Those organizations came together as "Project Mogul" to find a solution
to the problem.

... not this 1947-49 Project/Operation Mogul
http://en.wikipedia.org/wiki/Project_Mogul - a top secret project by the
US Army Air Forces involving microphones flown on high altitude
balloons, whose primary purpose was long-distance detection of sound
waves generated by Soviet atomic bomb tests.... In 1994/5, the Air Force
published a report which concluded that Mogul Flight #4, launched from
Alamogordo, New Mexico, on June 4, 1947, was what crashed near Roswell,
New Mexico, and formed the source of the debris which sparked the
Roswell UFO Incident.


--
Mike Easter

0 new messages