QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-1430

Back to search

CVE-2011-1430

Published: Mar 16, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

VendorProductVersions

n/a

n/a

affected
n/a

References

71020
vdb-entry
x_refsource_OSVDB
43676
third-party-advisory
x_refsource_SECUNIA
46767
vdb-entry
x_refsource_BID
VU#555316
third-party-advisory
x_refsource_CERT-VN
ADV-2011-0609
vdb-entry
x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now