Lucene search
PRIOn knowledge basePRION:CVE-2014-7273HistoryOct 08, 2014 - 1:55 a.m.
Information disclosure
2014-10-0801:55:00
PRIOn knowledge base
www.prio-n.com
5
6.2 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
31.4%
The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate.
Related
debiancve
debiancve
CVE-2014-7273
2014-10-08 01:55:00
cve
cve
CVE-2014-7273
2014-10-08 01:55:00
ubuntucve
ubuntucve
CVE-2014-7273
2014-10-08 00:00:00
nessus
nessus
GLSA-201412-50 : getmail: Information disclosure
2014-12-29 00:00:00
Debian DLA-106-1 : getmail4 security update
2015-03-26 00:00:00
openSUSE Security Update : getmail (openSUSE-SU-2014:1315-1)
2014-10-23 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3091-1] getmail4 security update
2014-12-22 00:00:00
getmail security vulnerabilities
2014-12-22 00:00:00
osv
osv
getmail4 - security update
2014-12-12 00:00:00
getmail4 - security update
2014-12-07 00:00:00
debian
debian
[SECURITY] [DLA 106-1] getmail4 security update
2014-12-12 13:51:17
[SECURITY] [DSA 3091-1] getmail4 security update
2014-12-07 16:29:55
[SECURITY] [DSA 3091-1] getmail4 security update
2014-12-07 16:14:25
gentoo
gentoo
getmail: Information disclosure
2014-12-28 00:00:00
openvas
openvas
Debian Security Advisory DSA 3091-1 (getmail4 - security update)
2014-12-07 00:00:00
Debian: Security Advisory (DLA-106-1)
2023-03-08 00:00:00
Gentoo Security Advisory GLSA 201412-50
2015-09-29 00:00:00
mageia
mageia
Updated getmail package fixes security vulnerabilities
2014-11-14 14:50:06
6.2 Medium
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
31.4%
Related for PRION:CVE-2014-7273