CVE-2011-3355

CVE-2011-3355

EPSS 0.8%

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

Produtos afetados

evolution-data-server3 · evolution-data-server3

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://access.redhat.com/security/cve/cve-2011-3355 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641052 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3355 https://security-tracker.debian.org/tracker/CVE-2011-3355 https://www.openwall.com/lists/oss-security/2011/09/09/1