CVE-2014-4366

CVE-2014-4366

EPSS 2.1%

Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://archives.neohapsis.com/archives/bugtraq/2014-09/0106.html https://exchange.xforce.ibmcloud.com/vulnerabilities/96098 http://support.apple.com/kb/HT6441 http://www.securityfocus.com/bid/69882 http://www.securityfocus.com/bid/69914 http://www.securitytracker.com/id/1030866