CVEvulnerability

CVE-2014-2014

4.3 MEDIUM Published 2014-04-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-04-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-255

Description

imapsync before 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote attackers to obtain credentials by sniffing the network.

Affected configurations

• imapsync project imapsync (<= 1.580) • imapsync project imapsync 1.53 • imapsync project imapsync 1.500 • imapsync project imapsync 1.504 • imapsync project imapsync 1.508 • imapsync project imapsync 1.516 • imapsync project imapsync 1.518 • imapsync project imapsync 1.525 • imapsync project imapsync 1.542 • imapsync project imapsync 1.547 • imapsync project imapsync 1.554 • imapsync project imapsync 1.558 • imapsync project imapsync 1.564 • imapsync project imapsync 1.567 • imapsync project imapsync 1.569

Related

Weakness · not in database (1)

References