CVE-2014-2014

imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...

CVE-2013-4279

imapsync 1.564 and earlier performs a release check by default, which sends sensitive information imapsync, operating system, and Perl version to the developer's site...

CVE-2014-2014

CVE-2014-2014 affects imapsync prior to 1.584 when using --tls: on certificate verification failure it may fall back to a cleartext login, risking credentials sniffed over the network. Public sources (NVD) document a CVSS v2 base score of 4.3 (Medium) with network attack vector and no authenticat...

CVE-2013-4279

The CVE-2013-4279 entry concerns imapsync where the release check runs by default and transmits sensitive information (imapsync version, OS, and Perl version) to the developer site. Connected advisories confirm that the vulnerability affects imapsync up to version 1.564 and earlier, with remediat...

CVE-2013-4279: Exposure of Sensitive Information to an Unauthorized Actor

imapsync 1.564 and earlier performs a release check by default, which sends sensitive information imapsync, operating system, and Perl version to the developer's site...

CVE-2014-2014: Undefined Security Weakness

imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network...

Fedora 20 : imapsync-1.584-2.fc20 (2014-3860)

Disable versioncheck Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for imapsync FEDORA-2014-3860

Check for the Version of imapsync OpenVAS Vulnerability Test Fedora Update for imapsync FEDORA-2014-3860 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for imapsync FEDORA-2014-3860

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: imapsync-1.584-2.fc20

imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...

imapsync information leakage

Few information leaks...

[ MDVSA-2014:060 ] imapsync

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:060 http://www.mandriva.com/en/support/security/ Package : imapsync Date : March 14, 2014 Affected: Business Server 1.0 Problem Description: Updated imapsync package fixes security vulnerabilities: Imapsync,...

Mandriva Linux Security Advisory : imapsync (MDVSA-2014:060)

Updated imapsync package fixes security vulnerabilities : Imapsync, by default, runs a release check when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl CVE-2013-4279. The imapsync packag...

Updated imapsync packages fix an information disclosure

Updated imapsync package fixes security vulnerability: Imapsync, by default, runs a "release check" when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl CVE-2013-4279. The imapsync package...

MGASA-2014-0127 Updated imapsync packages fix an information disclosure

Updated imapsync package fixes security vulnerability: Imapsync, by default, runs a "release check" when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl CVE-2013-4279. The imapsync package...

Fedora Update for imapsync FEDORA-2014-3491

Check for the Version of imapsync OpenVAS Vulnerability Test Fedora Update for imapsync FEDORA-2014-3491 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for imapsync FEDORA-2014-3491

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : imapsync-1.584-2.fc19 (2014-3491)

Disable releasecheck - CVE-2013-4279 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 703...

[SECURITY] Fedora 19 Update: imapsync-1.584-2.fc19

imapsync is a tool for facilitating incremental recursive IMAP transfers from one mailbox to another. It is useful for mailbox migration, and reduces the amount of data transferred by only copying messages that are not present on both servers. Read, unread, and deleted flags are preser ved, and t...

MGASA-2014-0106 Updated imapsync package fixes CVE-2014-2014

Updated imapsync package fixes security vulnerability: In imapsync before 1.584, a certificate verification failure when using the --tls option results in imapsync attempting a cleartext login CVE-2014-2014...