Lucene search
DueseeH1:953219HistoryAug 07, 2020 - 11:29 a.m.
PortSwigger Web Security: SMTP interaction theft via MITM
2020-08-0711:29:14
duesee
hackerone.com
126
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
83.1%
See http://www.postfix.org/CVE-2011-0411.html for adetailled description.
Impact
MitM could obtain user credentials.
Related
nessus
nessus
Fedora 13 : postfix-2.7.3-1.fc13 (2011-3355)
2011-03-24 00:00:00
SuSE 10 Security Update : Postfix (ZYPP Patch Number 7387)
2011-04-22 00:00:00
SuSE 10 Security Update : Postfix (ZYPP Patch Number 7403)
2011-12-13 00:00:00
veracode
veracode
Command Injection
2020-04-10 00:54:06
oraclelinux
oraclelinux
postfix security update
2011-04-06 00:00:00
postfix security update
2011-04-06 00:00:00
redhat
redhat
(RHSA-2011:0423) Moderate: postfix security update
2011-04-06 00:00:00
(RHSA-2011:0422) Moderate: postfix security update
2011-04-06 00:00:00
openvas
openvas
Fedora Update for postfix FEDORA-2011-3394
2011-03-25 00:00:00
Fedora Update for postfix FEDORA-2011-3355
2011-03-25 00:00:00
Fedora Update for postfix FEDORA-2011-3394
2011-03-25 00:00:00
freebsd
freebsd
postfix -- plaintext command injection with SMTP over TLS
2011-03-07 00:00:00
inn -- plaintext command injection into encrypted channel
2012-08-14 00:00:00
pureftpd -- multiple vulnerabilities
2011-04-01 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: pure-ftpd-1.0.30-1.fc14
2011-03-31 16:59:13
[SECURITY] Fedora 14 Update: postfix-2.7.3-1.fc14
2011-03-23 22:59:08
[SECURITY] Fedora 13 Update: postfix-2.7.3-1.fc13
2011-03-23 22:59:26
debiancve
debiancve
prion
prion
Command injection
2011-03-16 22:55:00
Command injection
2011-03-16 22:55:00
Command injection
2011-05-23 22:55:00
securityvulns
securityvulns
Plaintext injection in STARTTLS (multiple implementations)
2011-03-10 00:00:00
[SECURITY] [DSA 2346-1] proftpd-dfsg security update
2011-11-21 00:00:00
[ MDVSA-2011:100 ] cyrus-imapd
2011-05-25 00:00:00
ubuntucve
ubuntucve
cve
cve
debian
debian
[SECURITY] [DSA 2346-1] proftpd-dfsg security update
2011-11-15 20:39:09
[SECURITY] [DSA 2233-1] postfix security update
2011-05-10 17:57:47
osv
osv
proftpd-dfsg - several
2011-11-16 00:00:00
proftpd-dfsg - several
2011-11-16 00:00:00
postfix - several
2011-05-10 00:00:00
checkpoint_advisories
checkpoint_advisories
centos
centos
postfix security update
2011-04-08 12:13:18
ubuntu
ubuntu
Postfix vulnerabilities
2011-04-18 00:00:00
gentoo
gentoo
Postfix: Multiple vulnerabilities
2012-06-25 00:00:00
cert
cert
STARTTLS plaintext command injection vulnerability
2011-03-07 00:00:00
kitploit
kitploit
Vision2 - Nmap's XML result parse and NVD's CPE correlation to search CVE
2017-09-08 13:30:00
oracle
oracle
cpuapr2011
2011-04-19 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
83.1%
Related for H1:953219