CVE-2014-3494

KDE kdelibs 4.10.95 before 4.13.3 vulnerable in its POP3 kioslave (kmail/kio) to MITM via invalid SSL certificates, causing leakage of authentication data and email contents. The root cause is improper certificate handling in the POP3 kioslave. Public advisories and OpenVAS/Nessus entries (e.g., ...

CVE-2014-3494

kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate...