Lucene search
RedhatCVELIST:CVE-2012-3523HistoryNov 11, 2012 - 11:00 a.m.
CVE-2012-3523
2012-11-1111:00:00
redhat
raw.githubusercontent.com
1
The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a “plaintext command injection” attack, a similar issue to CVE-2011-0411.
Related
cve
cve
openvas
openvas
Mandriva Update for inn MDVSA-2012:156 (inn)
2012-10-03 00:00:00
FreeBSD Ports: inn
2012-08-30 00:00:00
FreeBSD Ports: inn
2012-08-30 00:00:00
freebsd
freebsd
inn -- plaintext command injection into encrypted channel
2012-08-14 00:00:00
postfix -- plaintext command injection with SMTP over TLS
2011-03-07 00:00:00
pureftpd -- multiple vulnerabilities
2011-04-01 00:00:00
prion
prion
Command injection
2012-11-11 13:00:00
Command injection
2011-03-16 22:55:00
Command injection
2011-03-16 22:55:00
debiancve
debiancve
nessus
nessus
Mandriva Linux Security Advisory : inn (MDVSA-2012:156)
2012-10-03 00:00:00
FreeBSD : inn -- plaintext command injection into encrypted channel (a7975581-ee26-11e1-8bd8-0022156e8794)
2012-08-27 00:00:00
GLSA-201401-24 : INN: Man-in-the-middle attack
2014-01-22 00:00:00
securityvulns
securityvulns
[ MDVSA-2012:156 ] inn
2012-10-04 00:00:00
STARTTLS vulnerability in different mail applications
2012-10-04 00:00:00
Plaintext injection in STARTTLS (multiple implementations)
2011-03-10 00:00:00
ubuntucve
ubuntucve
gentoo
gentoo
INN: Man-in-the-middle attack
2014-01-21 00:00:00
Postfix: Multiple vulnerabilities
2012-06-25 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: pure-ftpd-1.0.30-1.fc14
2011-03-31 16:59:13
[SECURITY] Fedora 14 Update: postfix-2.7.3-1.fc14
2011-03-23 22:59:08
[SECURITY] Fedora 13 Update: postfix-2.7.3-1.fc13
2011-03-23 22:59:26
hackerone
hackerone
PortSwigger Web Security: SMTP interaction theft via MITM
2020-08-07 11:29:14
oraclelinux
oraclelinux
postfix security update
2011-04-06 00:00:00
postfix security update
2011-04-06 00:00:00
cvelist
cvelist
veracode
veracode
Command Injection
2020-04-10 00:54:06
redhat
redhat
(RHSA-2011:0423) Moderate: postfix security update
2011-04-06 00:00:00
(RHSA-2011:0422) Moderate: postfix security update
2011-04-06 00:00:00
osv
osv
proftpd-dfsg - several
2011-11-16 00:00:00
proftpd-dfsg - several
2011-11-16 00:00:00
postfix - several
2011-05-10 00:00:00
ubuntu
ubuntu
Postfix vulnerabilities
2011-04-18 00:00:00
debian
debian
[SECURITY] [DSA 2346-1] proftpd-dfsg security update
2011-11-15 20:39:52
[SECURITY] [DSA 2233-1] postfix security update
2011-05-10 17:58:13
checkpoint_advisories
checkpoint_advisories
centos
centos
postfix security update
2011-04-08 12:13:18
cert
cert
STARTTLS plaintext command injection vulnerability
2011-03-07 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00
oracle
oracle
cpuapr2011
2011-04-19 00:00:00