CVE-2014-2567 in Trojita
요약 (영어)
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
Be aware that VulDB is the high quality source for vulnerability data.
예약하다
2014. 03. 20.
공개
2014. 03. 21.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 66744 | Trojita Helper handleStateHelper 정보 공개 | 200 | 정의되지 않음 | 공식 수정 | CVE-2014-2567 |