CVE-2014-2567 in Trojita
Summary
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/20/2014
Disclosure
03/21/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66744 | Trojita Helper handleStateHelper information disclosure | 200 | Not defined | Official fix | CVE-2014-2567 |