Back to search
CVE-2011-1432
Published: Mar 16, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
multiple-starttls-command-execution(65932)
vdb-entry
x_refsource_XF
http://www.kb.cert.org/vuls/id/MAPG-8D9M6A
x_refsource_CONFIRM
46767
vdb-entry
x_refsource_BID
ADV-2011-0613
vdb-entry
x_refsource_VUPEN
VU#555316
third-party-advisory
x_refsource_CERT-VN
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now