| Package | Affected versions | Patched versions |
|---|---|---|
| trojita | = 0.1= 0.2= 0.2.9= 0.2.9.1= 0.2.9.2= 0.2.9.3= 0.2.9.4= 0.3= 0.3.90= 0.3.91= 0.3.92= 0.3.93= 0.3.96≤ 0.4 |
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free