Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2014-7273
Description:The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in- the-middle attackers to spoof IMAP servers and obtain sensitive information via a crafted certificate.
Test IDs: 1.3.6.1.4.1.25623.1.1.1.2.2014.106   1.3.6.1.4.1.25623.1.0.703091  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-7273
Debian Security Information: DSA-3091 (Google Search)
http://www.debian.org/security/2014/dsa-3091
http://openwall.com/lists/oss-security/2014/10/07/33
http://secunia.com/advisories/61229
SuSE Security Announcement: openSUSE-SU-2014:1315 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-10/msg00029.html




© 1998-2025 E-Soft Inc. All rights reserved.