| Package | Affected versions | Patched versions |
|---|---|---|
| s/qmail | ≤ 4.0.07 |
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free