high8.1
CVE-2021-38084
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5.
Impact
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Courier-Mta | Courier Mail Server | before 1.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sourceforge.net/p/courier/mailman/courier-imap/thread/cone.1382574216.483027.8082.1000%40monster.email-scan.com/#msg31555583
- https://sourceforge.net/p/courier/mailman/message/37329216/
- https://sourceforge.net/p/courier/mailman/courier-imap/thread/cone.1382574216.483027.8082.1000%40monster.email-scan.com/#msg31555583
- https://sourceforge.net/p/courier/mailman/message/37329216/