external

Jul 1, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 23, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 23, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Mar 6, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Feb 16, 2022 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Oct 11, 2021 GO-2023-1630

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Sep 22, 2021 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0378: MD5 hash support in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Aug 9, 2021 GO-2022-0306 +3 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2022-0378: MD5 hash support in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Apr 11, 2021 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Dec 13, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Nov 21, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Oct 23, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Aug 23, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jul 24, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 18, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Jun 2, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

May 31, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

May 14, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Mar 26, 2020 GO-2022-0306 +2 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

  GO-2023-1630: Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy

Changes in this version

type ExternalAuth

+ func (ea *ExternalAuth) AuthPlain(username, password string) error

Feb 23, 2020 GO-2022-0306 +1 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

Feb 22, 2020 GO-2022-0306 +1 more

  GO-2022-0306: Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy

  GO-2022-0374: S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

Changes in this version

+ func AuthUsingHelper(l log.Logger, binaryPath, accountName, password string) bool

+ func NewExternalAuth(modName, instName string, _, inlineArgs []string) (module.Module, error)

+ type ExternalAuth struct

+ Log log.Logger

+ func (ea *ExternalAuth) CheckPlain(username, password string) bool

+ func (ea *ExternalAuth) Init(cfg *config.Map) error

+ func (ea *ExternalAuth) InstanceName() string

+ func (ea *ExternalAuth) Name() string