Closed
Bug 623596
Opened 14 years ago
Closed 6 years ago
Caching of incorrect password causes misbehavior
Categories
(Thunderbird :: Security, defect)
Tracking
(Not tracked)
RESOLVED
DUPLICATE
of bug 516464
People
(Reporter: hawk, Unassigned)
Details
(Whiteboard: dupeme)
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7
After entering wrong password to mail account it is somehow cached. Lets say I've entered bad password. There are three things that shouldn't happen, but they do:
1. Thunderbird waits a bit too long before it displays "wrong password" dialog. I've done some testing with my mail server and while server responds in matter of seconds with "login failed" message to the client Thunderbird keeps waiting... and waiting... and waiting... doing nothing as nothing appears in mail server log files. It happens on all mail servers that I use, including gmail.
2. On "bad password" dialog we have three options: retry, enter new password, cancel. After choosing cancel our bad password is somehow cached and used again after clicking on any folder of account in question causing another waiting for "bad password" dialog.
3. Sometimes after choosing "enter new password" from "bad password" dialog Thunderbird keeps asking for new password despite we have entered correct one. Choosing cancel and accessing account again breaks that loop.
Points 1 and 2 happens every time. Point 3 happens sometimes and I can't find way to reproduce it.
Reproducible: Always
Steps to Reproduce:
1. Enter bad password for mail account
2. Hit Cancel or Enter new password on "Bad password" dialog box.
3. Try to access account again.
Actual Results:
Thunderbird keeps as waiting despite that mail server has responded in blink of an eye.
After hitting cancel and trying to access account again our bad password if used and no prompt for new password appears.
Newly entered password sometimes isn't recognized by Thunderbird despite its correct one. Program keeps asking to enter new password while mail server logs shows it has logged in successfully.
Expected Results:
1. Thunderbird should immediately process server response without waiting and doing nothing before displaying "bad password" dialog.
2. Thunderbird shouldn't cache bad password after choosing "Cancel" from "bad password" dialog. After hitting cancel and accessing account again Thunderbird shouldn't try connecting to mail server with bad password again but display "enter password" dialog instead.
3. Looks like something bad happens sometimes after re-entering correct password and Thunderbird doesn't see that login was successfull. It instead keeps asking to re-enter new passord. That shouldn't happen.
Updated•14 years ago
|
Status: UNCONFIRMED → NEW
Component: General → Security
Ever confirmed: true
QA Contact: general → thunderbird
Comment 1•14 years ago
|
||
parts of this are duplicate: https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&short_desc=password&field0-0-0=short_desc&short_desc_type=allwordssubstr&type0-0-0=anywordssubstr&value0-0-0=wrong%20bad%20incorrect&resolution=---&product=MailNews%20Core&product=Thunderbird
(and perhaps all of it)
Whiteboard: dupeme
Comment 2•6 years ago
|
||
should be fixed by bug 516464. Please comment in the bug if you still see this problem in version 60
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•