2 matches found
CVE-2021-38084: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session...
8.1CVSS5.8AI score0.01369EPSS
SaveExploits0References2
SSL/TLS: POP3 'STLS' Command Detection
Checks if the remote POP3 server supports SSL/TLS with the Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
SaveExploits0References1
20