CVE-2014-2567
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
La función OpenConnectionTask::handleStateHelper en Imap/Tasks/OpenConnectionTask.cpp en Trojita anterior a 0.4.1 permite a atacantes man-in-the-middle provocar uso de texto plano para el guardado de un mensaje en una carpeta (1) sent o (2) draft a través de una respuesta PREAUTH que previene el uso posterior del comando STARTTLS.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-03-20 CVE Reserved
- 2014-03-21 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://github.com/jktjkt/trojita/commit/25fffa3e25cbad85bbca804193ad336b090a9ce1 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://jkt.flaska.net/blog/Trojita_0_4_1__a_security_update_for_CVE_2014_2567.html | 2014-03-26 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | <= 0.4 Search vendor "Trojita Project" for product "Trojita" and version " <= 0.4" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.1 Search vendor "Trojita Project" for product "Trojita" and version "0.1" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.2 Search vendor "Trojita Project" for product "Trojita" and version "0.2" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.2.9 Search vendor "Trojita Project" for product "Trojita" and version "0.2.9" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.2.9.1 Search vendor "Trojita Project" for product "Trojita" and version "0.2.9.1" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.2.9.2 Search vendor "Trojita Project" for product "Trojita" and version "0.2.9.2" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.2.9.3 Search vendor "Trojita Project" for product "Trojita" and version "0.2.9.3" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.2.9.4 Search vendor "Trojita Project" for product "Trojita" and version "0.2.9.4" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.3 Search vendor "Trojita Project" for product "Trojita" and version "0.3" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.3.90 Search vendor "Trojita Project" for product "Trojita" and version "0.3.90" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.3.91 Search vendor "Trojita Project" for product "Trojita" and version "0.3.91" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.3.92 Search vendor "Trojita Project" for product "Trojita" and version "0.3.92" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.3.93 Search vendor "Trojita Project" for product "Trojita" and version "0.3.93" | - |
Affected
| ||||||
| Trojita Project Search vendor "Trojita Project" | Trojita Search vendor "Trojita Project" for product "Trojita" | 0.3.96 Search vendor "Trojita Project" for product "Trojita" and version "0.3.96" | - |
Affected
| ||||||