Unscored CVE-2014-4366 EUVD-2014-4293GHSA-5q3x-gw4r-xxgc

Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain…

Published Sep 18, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.

References

http://support.apple.com/kb/HT6441
1030866 vdb-entry
69882 vdb-entry
appleios-cve20144366-info-disc(96098) vdb-entry
APPLE-SA-2014-09-17-1 vendor-advisory
69914 vdb-entry