imapsync project imapsync vulnerabilities and exploits

(subscribe to this query)

imapsync prior to 1.584, when running with the --tls option, attempts a cleartext login when a certificate verification failure occurs, which allows remote malicious users to obtain credentials by sniffing the network.

Imapsync Project Imapsync Imapsync Project Imapsync 1.53 Imapsync Project Imapsync 1.547 Imapsync Project Imapsync 1.516 Imapsync Project Imapsync 1.504 Imapsync Project Imapsync 1.554 Imapsync Project Imapsync 1.500 Imapsync Project Imapsync 1.558 Imapsync Project Imapsync 1.567 Imapsync Project Imapsync 1.542 Imapsync Project Imapsync 1.569 Imapsync Project Imapsync 1.518 Imapsync Project Imapsync 1.508 Imapsync Project Imapsync 1.525 Imapsync Project Imapsync 1.564

imapsync 1.564 and previous versions performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.

Imapsync Project Imapsync 1.53 Imapsync Project Imapsync 1.547 Imapsync Project Imapsync 1.516 Imapsync Project Imapsync 1.504 Imapsync Project Imapsync 1.554 Imapsync Project Imapsync 1.500 Imapsync Project Imapsync 1.558 Imapsync Project Imapsync Imapsync Project Imapsync 1.542 Imapsync Project Imapsync 1.518 Imapsync Project Imapsync 1.508 Imapsync Project Imapsync 1.525

imapsync up to and including 2.229 uses predictable paths under /tmp and /var/tmp in its default mode of operation. Both of these are typically world-writable, and thus (for example) an attacker can modify imapsync's cache and overwrite files belonging to the user who runs i...

Imapsync Project Imapsync

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook