CVE-2011-1431
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.6%
The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Produtos afetados
n/a · n/aReferências
http://inoa.net/qmail-tls/vu555316.patchhttp://securityreason.com/securityalert/8144https://exchange.xforce.ibmcloud.com/vulnerabilities/65932http://www.kb.cert.org/vuls/id/555316http://www.kb.cert.org/vuls/id/MAPG-8D9M5Qhttp://www.postfix.org/CVE-2011-0411.htmlhttp://www.securityfocus.com/archive/1/516901http://www.securityfocus.com/bid/46767http://www.vupen.com/english/advisories/2011/0612