Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2007-3209
HistoryJun 14, 2007 - 7:30 p.m.

CVE-2007-3209

2007-06-1419:30:00
Debian Security Bug Tracker
security-tracker.debian.org
3

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network.

OSVersionArchitecturePackageVersionFilename
Debian9allmail-notification< 5.4.dfsg.1-14mail-notification_5.4.dfsg.1-14_all.deb

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

Related for DEBIANCVE:CVE-2007-3209