ports/75150: Authentification data leak in emails sent to addressees (Evolution 2.0.2)

[Ilya Zhuravlev]

>Number:         75150
>Category:       ports
>Synopsis:       Authentification data leak in emails sent to addressees (Evolution 2.0.2)
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Dec 16 13:30:28 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Ilya Zhuravlev
>Release:        5.3 release p1
>Organization:
None
>Environment:
FreeBSD host.cbtnet.ru 5.3-RELEASE-p1 FreeBSD 5.3-RELEASE-p1 #5: Tue Dec 14 13:36:59 IRKT 2004     ilya at crux.cbtnet.ru:/usr/src/sys/i386/compile/CRUX  i386      
>Description:
X-Mailer: Evolution 2.0.2 FreeBSD GNOME Team Port 
X-Evolution-Transport:smtp://i.a.zhuravlev%40cbtnet.ru;auth=PLAIN@mail.cbtnet.ru/;use_ssl=when-possible
X-Evolution-Account: Personal
----------------------------
This problem was discussed with developers of the program :
http://support-forums.novell.com/group/novell.support.evolution/readerNoFrame.tpt/@thread@175@F@10@D-,D@ALL/@article@172
(See "Unwanted feature in Evolution")
They assert, that did not include similar "functionality" in the Evolution.

>How-To-Repeat:
Sent email
>Fix:
Now X-headers are rewtitten on mail server
>Release-Note:
>Audit-Trail:
>Unformatted: