Lucene search
HistoryJun 14, 2007 - 7:30 p.m.
CVE-2007-3209
cve-2007-3209
mail notification 4.0
with_ssl
unencrypted connections
remote attackers
sensitive information
network sniffing
6.4 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.01 Low
EPSS
Percentile
83.7%
Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network.
| CPE | Name | Operator | Version |
|---|---|---|---|
| nongnu:mail_notification | nongnu mail notification | eq | 4.0 |
Related
prion
prion
Design/Logic Flaw
2007-06-14 19:30:00
debiancve
debiancve
CVE-2007-3209
2007-06-14 19:30:00
ubuntucve
ubuntucve
CVE-2007-3209
2007-06-14 00:00:00
6.4 Medium
AI Score
Confidence
Low
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.01 Low
EPSS
Percentile
83.7%
Related for CVE-2007-3209