Re: potentially vulnerable to CVE-2009-3555 adverts

[JoeS]

On 4/10/2010 6:02 PM, Oedipe wrote:
> Hi,
>
> [Mozilla/5.0 (X11; U; Linux i686; fr-FR) Ubuntu/9.10 Thunderbird/3.0.4]
>
> My error console is absolutely full of lines with "potentially vulnerable to CVE-2009-3555" adverts.
>
> What's that ???
>
Google3 is your friend:
https://bugzilla.redhat.com/show_bug.cgi?id=533125

--
JoeS Using TB3
http://kb.mozillazine.org/Thunderbird_3.0_-_New_Features_and_Changes
https://developer.mozilla.org/en/Thunderbird/Thunderbird_Binaries
http://kb.mozillazine.org/Breakpad#Using_the_application_to_view_crash_reports

[David E. Ross]

On 4/10/10 3:02 PM, Oedipe wrote:
> Hi,
>
> [Mozilla/5.0 (X11; U; Linux i686; fr-FR) Ubuntu/9.10 Thunderbird/3.0.4]
>
> My error console is absolutely full of lines with "potentially
> vulnerable to CVE-2009-3555" adverts.
>
> What's that ???
>

This was discussed today in the mozilla.dev.mozilla-org newsgroup.
CVE-2009-3555 is the ID of a protocol vulnerability affecting both
client and server software. This vulnerability can create an
opportunity for a man-in-the-middle attack on an otherwise secure
session.

Apparently, Mozilla and Mozilla-based client products have been patched
to avoid the problem within the products. Servers that have not yet
been patched -- beyond the control of Mozilla -- cause the information
message to appear in the Error Console. However, the discussion in
mozilla.dev.mozilla-org was actually about a Mozilla-controlled server,
the bugzilla.mozilla.org server.

--
David E. Ross
<http://www.rossde.com/>

Go to Mozdev at <http://www.mozdev.org/> for quick access to
extensions for Firefox, Thunderbird, SeaMonkey, and other
Mozilla-related applications. You can access Mozdev much
more quickly than you can Mozilla Add-Ons.

[David]

I'm also getting these messages after installing Thunderbird 3 on a
new computer with Windows 7 OS, and coincientally or not, have found
that I cannot send (but can recevie) e-mail on the client side. The
error message when sending says the SMTP server timed out. This only
seems to happen when I am not on my home network. Any help would be
greatly appreciated.

David S.

[Ron K.]

David on 4/24/2010 8:46 PM, keyboarded a reply:

Contact your provider about there support of roaming access. Seems your
mail send SMTP connection configuration is not getting you connected. May
be an lack of authentication.

--
Ron K.
Who is General Failure, and why is he searching my HDD?
Kernel Restore reported Major Error used BSOD to msg the enemy!