665358 - when sending mails: error reports in the error console. securepop.t-online.de : server does not support RFC 5746, see CVE-2009-3555 ...

Status: RESOLVED INVALID

(Thunderbird :: Mail Window Front End, defect)

Description

[axel.ebsen]

User-Agent:       Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.17) Gecko/20110414 Thunderbird/3.1.10

1.after starting thunderbird the erro console shows: 
  securepop.t-online.de : server does not support RFC 5746, see CVE-2009-3555

2. sending a small+simple testmail to myselve the error console shows:
   securepop.t-online.de : server does not support RFC 5746, see CVE-2009-3555
and two times the following erro-mag:
   Error: An error occurred updating the cmd_delete command: [Exception... "'[JavaScript Error: "goSetMenuValue is not defined" {file: "chrome://messenger/content/addressbook/abResultsPane.js" line: 406}]' when calling method: [nsIController::isCommandEnabled]"  nsresult: "0x80570021 (NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS)"  location: "JS frame :: chrome://global/content/globalOverlay.js :: goUpdateCommand :: line 80"  data: yes]
Source File: chrome://global/content/globalOverlay.js
Line: 86

which is followed once more by:
 securesmtp.t-online.de : server does not support RFC 5746, see CVE-2009-3555

After retrieving the mail - wich is ok - the error console shows:   

 Error: [Exception... "Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIMsgDatabase.Commit]"  nsresult: "0x80004005 (NS_ERROR_FAILURE)"  location: "JS frame :: file:///C:/Program%20Files%20(x86)/Mozilla%20Thunderbird/modules/gloda/index_msg.js :: gloda_index_indexerLeaveFolder :: line 876"  data: no]
Source File: file:///C:/Program%20Files%20(x86)/Mozilla%20Thunderbird/modules/gloda/index_msg.js
Line: 876

Reproducible: Always

Steps to Reproduce:
1. see above
2.
3.

Actual Results:  
the mail is send to recipient including attachmant(s)....
thunderbird is running well

Expected Results:  
no error reports!

pop mail server name: securepop.t-online.de port 995
outgoing server: securesmtp.t-online.de at port 587   

Windows 7/64 bit actual updates installed

Comment 1

[Wayne Mery (:wsmwk)]

please check if starting in safe mode gets rid of the js errors.

as for securepop.t-online.de : server does not support RFC 5746, see CVE-2009-3555 ...
have you looked up the error?

Comment 2

[axel.ebsen]

...also in save mode the same behaviour!
Sorry: I tried to find some information for RFC 5746 + CVE-2009-3555...but without any succes! So i need some help

Comment 3

[Joshua Cranmer [:jcranmer]]

The CVE-2009-3555 is apparently a problem where SSL is susceptible to an attack in certain situations. According to bug 554615 comment 3, this was added to help server admins become aware of the problems. Judging from the fact that only two of my accounts do *not* spawn this warning, I'm going to guess it's a miserable failure, at least for email accounts...

Comment 4

[axel.ebsen]

Whenever by sending an mail the following error(I reported above) 

Error: An error occurred updating the cmd_delete command: [Exception... "'[JavaScript Error: "goSetMenuValue is not defined" {file: "chrome://messenger/content/addressbook/abResultsPane.js" line: 406}]' when calling method: [nsIController::isCommandEnabled]"  nsresult: "0x80570021 (NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS)"  location: "JS frame :: chrome://global/content/globalOverlay.js :: goUpdateCommand :: line 80"  data: yes]
Source File: chrome://global/content/globalOverlay.js
Line: 86
 
is reported(always twice)in the error console, the Thunderbird application seems to be in a loop; the windows task-manager shows for about 20 sec. "task not responding" for three tasks: 1.error console, 2. inbox and 3. write(the mail) and also the mouse does not "work"; short after the status of the three tasks change to executing, the mouse works fine and the screen is restored or is active/reacts.
receiving mails with/without attachments is no problem.

Comment 5

[wisspur]

I've got this message from Thunderbird error console. What does it mean?

pop.att.yahoo.com : server does not support RFC 5746, see CVE-2009-3555

Comment 6

[wisspur]

I forget to include the version. It is 9.0.1

Comment 7

[David :Bienvenu]

(In reply to wisspur from comment #5)
> I've got this message from Thunderbird error console. What does it mean?
> 
> pop.att.yahoo.com : server does not support RFC 5746, see CVE-2009-3555

If you read the linked to CVE, you'll  see what it means - but basically, the server is somewhat vulnerable to man in the middle attacks.