* IM/Pop.pm (pop_open): Don't allow non-ASCII characters for APOP timestamp. [CVE-2007-1558] --- im-148/IM/Pop.pm 2005-03-08 06:28:24.000000000 +0900 +++ im-149/IM/Pop.pm 2007-04-23 20:57:04.000000000 +0900 @@ -98,7 +98,7 @@ return -1; } } elsif ($auth eq 'APOP') { - if ($resp !~ /^\+.*(<.+>)/i) { + if ($resp !~ /^\+.*(<[=!-;?-~]+\@[=!-;?-~]+>)/) { im_err("APOP is not supported by the server.\n"); return -1; }