CVE-2014-2567

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a 1 sent or 2 draft folder via a PREAUTH response that prevents later use of the STARTTLS comman...

PT-2014-4782

Name of the Vulnerable Software and Affected Versions Trojita versions prior to 0.4.1 Description The issue allows man-in-the-middle attackers to trigger the use of cleartext for saving a message into a sent or draft folder. This is achieved via a PREAUTH response that prevents later use of the...

CVE-2014-2567: Exposure of Sensitive Information to an Unauthorized Actor

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a 1 sent or 2 draft folder via a PREAUTH response that prevents later use of the STARTTLS comman...