CVE-2014-4366

Vulnerability summary (CVE-2014-4366) : In iOS Mail prior to iOS 8, the Mail client could send the LOGIN command to IMAP servers that advertised LOGINDISABLED, enabling an attacker to sniff and obtain cleartext credentials on the network. Affected component : Mail app (iOS). Root cause : Mail did...

CVE-2014-4366

Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network...