Lucene search
+L

6 matches found

OSV
OSV
•added 2024/05/18 7:15 p.m.•8 views

DEBIAN-CVE-2024-34083

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle...

5.4CVSS5.7AI score0.00228EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/05/18 7:15 p.m.•23 views

CVE-2024-34083

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle...

5.4CVSS6.1AI score0.00228EPSS
SaveExploits0References4
OSV
OSV
•added 2024/05/18 7:15 p.m.•13 views

UBUNTU-CVE-2024-34083

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle...

5.4CVSS5.8AI score0.00228EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/05/18 6:12 p.m.•86 views

CVE-2024-34083

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle...

5.4CVSS5.4AI score0.00228EPSS
SaveExploits0
Cvelist
Cvelist
•added 2024/05/18 6:12 p.m.•49 views

CVE-2024-34083 STARTTLS unencrypted commands injection

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle...

5.4CVSS5.4AI score0.00228EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/18 12:00 a.m.•1 views

CVE-2024-34083: Acceptance of Extraneous Untrusted Data With Trusted Data

aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle...

5.4CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder