CVE-2014-2014

CVE-2014-2014 affects imapsync prior to 1.584 when using --tls: on certificate verification failure it may fall back to a cleartext login, risking credentials sniffed over the network. Public sources (NVD) document a CVSS v2 base score of 4.3 (Medium) with network attack vector and no authenticat...

Mandriva Linux Security Advisory : imapsync (MDVSA-2014:060)

Updated imapsync package fixes security vulnerabilities : Imapsync, by default, runs a release check when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl CVE-2013-4279. The imapsync packag...

Updated imapsync package fixes CVE-2014-2014

Updated imapsync package fixes security vulnerability: In imapsync before 1.584, a certificate verification failure when using the --tls option results in imapsync attempting a cleartext login CVE-2014-2014...