fetchmail -- TLS enforcement problem/MITM attack/password exposureentered 2007-01-06
no CVE referenced
CVE details
CVE-2006-5867
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.
- Score
- 7.8 high
- Published
- 2006-12-31
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.