251 matches found
openSUSE: Security Advisory for mutt (openSUSE-SU-2020:0903-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for mutt (important)
openSUSE Security Update: Security update for mutt Announcement ID: openSUSE-SU-2020:0903-1 Rating: important References: 1172906 1172935 1173197 Cross-References: CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 Affected Products: openSUSE Leap 15.1 An update that fixes three vulnerabilities is now...
Security update for mutt (important)
openSUSE Security Update: Security update for mutt Announcement ID: openSUSE-SU-2020:0915-1 Rating: important References: 1172906 1172935 1173197 Cross-References: CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 Affected Products: openSUSE Leap 15.2 An update that fixes three vulnerabilities is now...
CVE-2020-14929
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do...
CVE-2020-14929
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do...
Design/Logic Flaw
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do...
CVE-2020-14929
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do...
CVE-2020-14929
CVE-2020-14929 affects Alpine (pre-2.23) where,a PREAUTH scenario can cause Alpine to proceed over an insecure connection after a /tls is sent instead of closing the connection. Public records in multiple vendor advisories indicate the issue is addressed by upgrading Alpine to 2.23 or newer; Fedo...
CVE-2020-14929: Undefined Security Weakness
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do...
Mutt Information Disclosure Vulnerability
Mutt is a text-based mail client for Unix-like systems by Michael Elkins Software Developers. A security vulnerability exists in Mutt versions prior to 1.14.3. The vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack using the PREAUTH response...
CVE-2020-14093
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...
CVE-2020-14093
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...
UBUNTU-CVE-2020-14093
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...
CVE-2020-14093
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...
CVE-2020-14093: Cleartext Transmission of Sensitive Information
Mutt before 1.14.3 allows an IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...
IMAP fcc/postpone machine-in-the-middle attack
mutt 1.14.3 updates: CVE-2020-14093 - IMAP fcc/postpone man-in-the-middle attack via a PREAUTH response...
CVE-2020-12398
The Mozilla Foundation Security Advisory describes this flaw as: If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent without protection...
AirControl 1.4.2 Remote Code Execution
Exploit Title: AirControl 1.4.2 - PreAuth Remote Code Execution Date: 2020-06-03 Exploit Author: 0xd0ff9 vs j3ssie Vendor Homepage: https://www.ui.com/ Software Link: https://www.ui.com/download/!utilities Version: AirControl = 1.4.2 Signature:...
Mozilla Thunderbird < 68.9.0
The version of Thunderbird installed on the remote Windows host is prior to 68.9.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-22 advisory. - Mozilla developers Tom Tung and Karl Tomlinson reported memory safety bugs present in Firefox 68.8. Some of these...
PT-2020-13101
Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 68.9.0 Description The issue arises when Thunderbird is configured to use STARTTLS for an IMAP server and the server sends a PREAUTH response. In this scenario, Thunderbird continues with an unencrypted connection...