CVE-2020-15955
EUVD-2020-792617.08.2021, 18:15
In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| fehcom | s\/qmail | 𝑥 ≤ 4.0.07 |
𝑥
= Vulnerable software versions