CVE-2014-2567

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger…

published March 21, 2014

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00981 · 61.9th percentile
Published
2014-03-21T10:00Z
EPSS history
Timeline
  • 21 MAR 10:00Z
    The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger…
    cvelistv5