CVE-2014-2014

CVE-2014-2014 affects imapsync prior to 1.584 when using --tls: on certificate verification failure it may fall back to a cleartext login, risking credentials sniffed over the network. Public sources (NVD) document a CVSS v2 base score of 4.3 (Medium) with network attack vector and no authenticat...

CVE-2013-4279

The CVE-2013-4279 entry concerns imapsync where the release check runs by default and transmits sensitive information (imapsync version, OS, and Perl version) to the developer site. Connected advisories confirm that the vulnerability affects imapsync up to version 1.564 and earlier, with remediat...

CVE-2023-34204

CVE-2023-34204 affects imapsync up to version 2.229. The issue arises from the use of predictable, world-writable temporary paths under /tmp and /var/tmp in the default operation, allowing an untrusted user or local attacker to modify the tool’s cache and overwrite files belonging to the running ...