medium5.9
CVE-2013-4584
Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server.
Impact
Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers not being applied to STARTTLS connections
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Horms | Perdition | before 2.1 |
| Debian | Debian Linux | Versions 8.0, 9.0, 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2013/11/15/6
- http://www.securityfocus.com/bid/63696
- https://access.redhat.com/security/cve/cve-2013-4584
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89184
- https://github.com/horms/perdition/commit/62a0ce94aeb7dd99155882956ce9e327ab914ddf
- https://security-tracker.debian.org/tracker/CVE-2013-4584
- http://www.openwall.com/lists/oss-security/2013/11/15/6
- http://www.securityfocus.com/bid/63696
- https://access.redhat.com/security/cve/cve-2013-4584
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89184
- https://github.com/horms/perdition/commit/62a0ce94aeb7dd99155882956ce9e327ab914ddf
- https://security-tracker.debian.org/tracker/CVE-2013-4584