CVEvulnerability
CVE-2011-3355
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-11-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-311
Description
evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.
Affected configurations
• gnome evolution-data-server3 (>= 3.0.3 <= 3.2.1)
Related
Weakness · CWE (1)
- CWE-311 Missing Encryption of Sensitive Data weakness
References
- https://access.redhat.com/security/cve/cve-2011-3355 Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641052 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3355 Issue Tracking, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-3355 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2011/09/09/1 Exploit, Mailing List
- https://access.redhat.com/security/cve/cve-2011-3355 Third Party Advisory
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641052 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3355 Issue Tracking, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2011-3355 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2011/09/09/1 Exploit, Mailing List