38 matches found
Msmtp - Config Exposure Detection
Msmtp configuration was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Msmtp configuration was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Msmtp - Config Exposure Detection', 'description':...
EUVD-2025-202943
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle MITM attack, which may obtain the sensitive...
CVE-2025-13052 An improper certificates validation vulnerability was found in the Notification settings of ADM
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle MITM attack, which may obtain the sensitive...
CVE-2025-13052: Improper Certificate Validation
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle MITM attack, which may obtain the sensitive...
EUVD-2019-17727
Malware in sbrugna...
EUVD-2009-3913
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-8337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked. CVE-2019-8337 Note th...
OPENSUSE-SU-2024:11064-1 msmtp-1.8.16-1.1 on GA media
These are all security issues fixed in the msmtp-1.8.16-1.1 package on the GA media of openSUSE Tumbleweed...
Msmtp TLS Trust File
The vulnerability of the tlstrustfile command in the SMTP client Msmtp and the POP3 client Mpop is related to incorrect authentication of the certificate’s authenticity. Exploiting this vulnerability allows a malicious actor to compromise the integrity, availability, and confidentiality of...
FreeBSD : msmtp -- certificate-verification issue (f0416fb5-3130-11e9-a5ba-e0d55e883e26)
msmtp developers report : In msmtp 1.8.2, when tlstrustfile has its default configuration, certificate-verification results are not properly checked. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright...
[ASA-201902-22] msmtp: certificate verification bypass
Arch Linux Security Advisory ASA-201902-22 ========================================== Severity: High Date : 2019-02-17 CVE-ID : CVE-2019-8337 Package : msmtp Type : certificate verification bypass Remote : Yes Link : https://security.archlinux.org/AVG-905 Summary ======= The package msmtp before...
CVE-2019-8337
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
CVE-2019-8337
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
DEBIAN-CVE-2019-8337
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
CVE-2019-8337
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
UBUNTU-CVE-2019-8337
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
Default configuration
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
CVE-2019-8337
In msmtp 1.8.2 and mpop 1.4.3, when tlstrustfile has its default configuration, certificate-verification results are not properly checked...
