https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:30:09 +0000 https://vulnerability.circl.lu/vuln/cve-2020-15953 <p>LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a &#34;begin TLS&#34; response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka &#34;response injection.&#34;</p> <p>LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a &#34;begin TLS&#34; response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka &#34;response injection.&#34;</p> https://vulnerability.circl.lu/vuln/cve-2020-15953 https://vulnerability.circl.lu/vuln/usn-4598-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libetpan</p> <p>It was discovered that LibEtPan incorrectly handled STARTTLS when using IMAP, SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack. (CVE-2020-15953)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: libetpan</p> <p>It was discovered that LibEtPan incorrectly handled STARTTLS when using IMAP, SMTP and POP3. A remote attacker could possibly use this issue to perform a response injection attack. (CVE-2020-15953)</p> https://vulnerability.circl.lu/vuln/usn-4598-1