Summary
It was discovered that LibEtPan incorrectly handled STARTTLS when using
IMAP, SMTP and POP3. A remote attacker could possibly use this issue
to perform a response injection attack. (CVE-2020-15953)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libetpan | 1.6-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that aff…
References
-
report
https://ubuntu.com/security/CVE-2020-15953