CVE-2021-38084

2021-08-0322:15:09

Google

osv.dev

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.

CPENameOperatorVersion
couriereqcourier-sox/0.12/20131006094016
couriereqcourier-sox/0.14/20200618215757
couriereqcourier-authlib/0.69.1/20190724201053
couriereqcourier-authlib/0.66.3/20150628230025
couriereqcourier-sox/0.15/20210209215744
couriereqcourier/0.78.1/20171004193712
couriereqcourier-imap/5.0.12/20210209210152
couriereqmaildrop/2.8.3/20150628231513
couriereqcourier-authlib/0.66.0/20130928223315
couriereqcone/0.91/20141213104043

Name	Operator	Version
courier	eq	courier-sox/0.12/20131006094016
courier	eq	courier-sox/0.14/20200618215757
courier	eq	courier-authlib/0.69.1/20190724201053
courier	eq	courier-authlib/0.66.3/20150628230025
courier	eq	courier-sox/0.15/20210209215744
courier	eq	courier/0.78.1/20171004193712
courier	eq	courier-imap/5.0.12/20210209210152
courier	eq	maildrop/2.8.3/20150628231513
courier	eq	courier-authlib/0.66.0/20130928223315
courier	eq	cone/0.91/20141213104043