In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
References
Link | Resource |
---|---|
https://alpine.x10host.com | Release Notes Third Party Advisory |
https://bugs.gentoo.org/807613#c4 | Third Party Advisory |
https://nostarttls.secvuln.info | Exploit Third Party Advisory |
https://security.gentoo.org/glsa/202301-07 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-08-10T00:00:00
Updated: 2023-01-11T00:00:00
Reserved: 2021-08-10T00:00:00
Link: CVE-2021-38370
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-08-10T15:15:08.270
Modified: 2023-01-13T20:05:53.653
Link: CVE-2021-38370
JSON object: View
Redhat Information
No data.
CWE