CVE-2011-1431

MEDIUM 6.8CVE-2011-1431 · Published 16/03/2011 · updated 16/06/2026

In short

CVE-2011-1431 is a MEDIUM (CVSS 6.8) vulnerability affecting netqmail (frederik vermeulen).
Chance of exploitation in the next 30 days (EPSS): 4.6%, higher than 91.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netqmail frederik_vermeulen	`= 1.06`	No fix yet

Description

The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

References

inoa.net/qmail-tls/vu555316.patch · Patch
securityreason.com/securityalert/8144
kb.cert.org/vuls/id/555316 · US Government Resource
kb.cert.org/vuls/id/MAPG-8D9M5Q · US Government Resource
postfix.org/CVE-2011-0411.html · Exploit
securityfocus.com/archive/1/516901 · Exploit
securityfocus.com/bid/46767
vupen.com/english/advisories/2011/0612 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/65932

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free