EUVD-2020-21914

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure...

CVE-2020-29547

An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure...

PT-2021-11690

Name of the Vulnerable Software and Affected Versions: SmarterTools SmarterMail versions through 100.0.7537 Description: An issue allows meddler-in-the-middle attackers to pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session. This can be exploit...

CVE-2020-29548: Improper Neutralization of Special Elements used in a Command

An issue was discovered in SmarterTools SmarterMail through 100.0.7537. Meddler-in-the-middle attackers can pipeline commands after a POP3 STLS command, injecting plaintext commands into an encrypted user session...