Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2021-38084

Published: 03/08/2021 Updated: 09/09/2021
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Courier-mta

Vulnerability Summary

An issue exists in the POP3 component of Courier Mail Server prior to 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

courier-mta courier mail server

Vendor Advisories

Debian CVElist Bug Report Logs: courier: CVE-2021-38084
Debian Bug report logs - #989375 courier: CVE-2021-38084 Package: src:courier; Maintainer for src:courier is Markus Wanner <markus@bluegapch>; Reported by: Sysadmin HTL Leonding <debbtsreports@htl-leondingacat> Date: Wed, 2 Jun 2021 07:03:02 UTC Severity: important Tags: security, upstream Found in versions cour ...

References

CWE-74https://sourceforge.net/p/courier/mailman/message/37329216/https://sourceforge.net/p/courier/mailman/courier-imap/thread/cone.1382574216.483027.8082.1000%40monster.email-scan.com/#msg31555583https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989375https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975CVE-2024-2961CVE-2024-20380XML injectionHTML injectionCVE-2024-29204CVE-2023-51795memory leakCVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook