CVE-2014-2567

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:trojita_project:trojita:0.3.96:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.3.93:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.3.92:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.3.91:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:*:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.3.90:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.2.9.4:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.2.9.2:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.2.9.1:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.2.9:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.2:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.1:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.2.9.3:*:*:*:*:*:*:*
cpe:2.3:a:trojita_project:trojita:0.3:*:*:*:*:*:*:*

Information

Published : 2014-03-21 03:55

Updated : 2014-03-25 17:20


NVD link : CVE-2014-2567

Mitre link : CVE-2014-2567


JSON object : View

CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

Advertisement

dedicated server usa

Products Affected

trojita_project

  • trojita