CVE-2006-5867

fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows…

published January 9, 2007

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04505 · 91.5th percentile
Published
2007-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows…
    cvelistv5