Secunia

A security issue has been reported in vpopmail, which can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to an error within the handling of SMTP AUTH and APOP password authentication. This can be exploited to authenticate to the mail server using a blank password.

Successful exploitation requires that cleartext password authentication is enabled and that the account does not have a cleartext password set.

The security issue has been reported in versions 5.4.14 and 5.4.15. Prior versions may also be affected.

Solution
The security issue has been fixed in development version 5.4.16.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://sourceforge.net/project/shownotes.php?release_id=415350

Deep Links
Links available in Customer Area