CVE-2007-3209

ALTO 7.8CVE-2007-3209 · Published 14/06/2007 · updated 16/06/2026

In breve

CVE-2007-3209 è una vulnerabilità ALTO (CVSS 7.8) che riguarda mail notification (nongnu).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mail notification nongnu	`= 4.0`	No fix yet

Description

Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured with SSL/TLS, which allows remote attackers to obtain sensitive information by sniffing the network.

References

bugs.debian.org/cgi-bin/bugreport.cgi
osvdb.org/37205
secunia.com/advisories/25600 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/34814
savannah.nongnu.org/bugs/index.php

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free