| Package | Affected versions | Patched versions |
|---|---|---|
| courier mail server | < 1.1.5 | 1.1.5 |
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free