Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sco Subscribe
Filtered by product Scoofficeserver
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2011-1432 1 Sco 1 Scoofficeserver 2017-08-16 6.8 MEDIUM N/A
The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.