Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Offlineimap Subscribe
Filtered by product Offlineimap
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-4532 2 Debian, Offlineimap 2 Debian Linux, Offlineimap 2020-08-18 4.3 MEDIUM 5.9 MEDIUM
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.
CVE-2010-4533 2 Debian, Offlineimap 2 Debian Linux, Offlineimap 2020-08-18 7.5 HIGH 9.8 CRITICAL
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.