CVEvulnerability
CVE-2014-5369
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected configurations
• enigmail enigmail 1.7
• enigmail enigmail 1.7.2
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00008.html lists.opensuse.org
- http://secunia.com/advisories/60779 secunia.com
- http://secunia.com/advisories/60887 secunia.com
- http://secunia.com/advisories/61854 secunia.com
- http://sourceforge.net/p/enigmail/bugs/294/ Patch
- http://sourceforge.net/p/enigmail/forum/support/thread/3e7268a4/ sourceforge.net
- http://www.openwall.com/lists/oss-security/2014/08/18/2 Exploit
- http://www.openwall.com/lists/oss-security/2014/08/22/1 www.openwall.com
- https://advisories.mageia.org/MGASA-2014-0421.html advisories.mageia.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00004.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2014-09/msg00008.html lists.opensuse.org
- http://secunia.com/advisories/60779 secunia.com
- http://secunia.com/advisories/60887 secunia.com
- http://secunia.com/advisories/61854 secunia.com
- http://sourceforge.net/p/enigmail/bugs/294/ Patch
- http://sourceforge.net/p/enigmail/forum/support/thread/3e7268a4/ sourceforge.net
- http://www.openwall.com/lists/oss-security/2014/08/18/2 Exploit
- http://www.openwall.com/lists/oss-security/2014/08/22/1 www.openwall.com
- https://advisories.mageia.org/MGASA-2014-0421.html advisories.mageia.org
- https://security.gentoo.org/glsa/201504-01 security.gentoo.org