CVE-2014-2567

Опубликовано: 21 мар. 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:trojita_project:trojita:*:*:*:*:*:*:*:*

Версия до 0.4 (включая)

cpe:2.3:a:trojita_project:trojita:0.1:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.2:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.2.9:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.2.9.1:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.2.9.2:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.2.9.3:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.2.9.4:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.3:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.3.90:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.3.91:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.3.92:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.3.93:*:*:*:*:*:*:*

cpe:2.3:a:trojita_project:trojita:0.3.96:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00255

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-fxf2-wm9g-3jj2

github

больше 3 лет назад