CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

The IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname matches a domain name in the subject's Common Name CN field of the X.509 certificate, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certifica...

5.8CVSS6.5AI score0.00177EPSS

Exploits0References3

SUSE CVE•added 2023/02/15 5:26 a.m.•2 views

SUSE CVE-2014-7273

The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate...

6.8CVSS6.5AI score0.0021EPSS

Exploits0References3

NVD•added 2005/01/27 5:0 a.m.•15 views

CVE-2004-0880

getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file...

1.2CVSS6.1AI score0.00103EPSS

Exploits0References5

NVD•added 2005/01/27 5:0 a.m.•11 views

CVE-2004-0881

getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir...

2.1CVSS6.1AI score0.00126EPSS

Exploits0References5

securityvulns•added 2004/09/27 12:0 a.m.•19 views

Local root compromise possible with getmail

The following vulnerabilities apply to all releases of getmail prior to 3.2.5, and all version 4 releases prior to 4.2.0. They do not apply where getmail is run as an unprivileged user, or where an unprivileged external MDA is used for the final delivery of mail. They are not exploitable remotely...

1AI score

Exploits0