CVE-2010-4533

Removed by vendor...

CVE-2010-4533

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies...

CVE-2010-4532

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...

CVE-2010-4532

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...

Code injection

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...

CVE-2010-4532

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...

CVE-2010-4532

Removed by vendor...

CVE-2010-4532

CVE-2010-4532 affects offlineimap prior to 6.3.2. The issue is that SSL certificate validation is not performed when the option “ssl = yes” is used, enabling potential man-in-the-middle attacks. This is caused by missing certificate validation in the SSL path of the client. Impact is limited to c...

CVE-2010-4533: Improper Certificate Validation

offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies...

PT-2019-6588

Name of the Vulnerable Software and Affected Versions offlineimap versions prior to 6.3.4 Description The issue concerns the use of the SSL v2 protocol, which has multiple security deficiencies. Although offlineimap added support for SSL server certificate validation before version 6.3.4, it is...

PT-2019-6587

Name of the Vulnerable Software and Affected Versions offlineimap versions prior to 6.3.2 Description The issue allows for man-in-the-middle attacks due to the lack of SSL server certificate validation when the "ssl = yes" option is specified. Recommendations For versions prior to 6.3.2, update t...

CVE-2010-4532: Improper Certificate Validation

offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks...