« Volver al listado

CVE-2014-2567

Estado: ModificadaMedia (4.3)—

The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Trojita Project — Trojita

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2567",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-03-21T10:55:05.580",
  "references": [
    {
      "url": "http://jkt.flaska.net/blog/Trojita_0_4_1__a_security_update_for_CVE_2014_2567.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/jktjkt/trojita/commit/25fffa3e25cbad85bbca804193ad336b090a9ce1",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jkt.flaska.net/blog/Trojita_0_4_1__a_security_update_for_CVE_2014_2567.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/jktjkt/trojita/commit/25fffa3e25cbad85bbca804193ad336b090a9ce1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command."
    },
    {
      "lang": "es",
      "value": "La función OpenConnectionTask::handleStateHelper en Imap/Tasks/OpenConnectionTask.cpp en Trojita anterior a 0.4.1 permite a atacantes man-in-the-middle provocar uso de texto plano para el guardado de un mensaje en una carpeta (1) sent o (2) draft a través de una respuesta PREAUTH que previene el uso posterior del comando STARTTLS."
    }
  ],
  "lastModified": "2026-06-17T00:06:48.797",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B33377B3-F956-4D95-B09F-14B738B5E6A8",
              "versionEndIncluding": "0.4"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DDCF322-D6C2-4342-983D-7B5CD9E73B57"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CFAABFE-6021-4D55-98CC-D2A2FB3A4FD2"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.2.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E812E533-EBAC-411E-821B-6120939039AE"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.2.9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6CC990A2-E129-4DCB-ADBB-223CE465143A"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.2.9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07955D72-95B7-493D-8169-184AD1B240B7"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.2.9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73772866-A8E1-451D-8EF0-814730B5D42B"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.2.9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "582A4F36-D73E-41E3-B5EC-5EC994A2B88E"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B68EBF7-0535-4631-9083-A597C6FDDCD9"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.3.90:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14770E73-6416-4F34-B7C8-69816F74F8C9"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.3.91:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2441D707-1157-4011-A65D-0D9AC25E02A2"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.3.92:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D73B2190-921B-4D8F-BF84-BDCB84828CEF"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.3.93:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C104B37F-F76A-48E3-A0ED-647D0A136574"
            },
            {
              "criteria": "cpe:2.3:a:trojita_project:trojita:0.3.96:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1323341B-AE86-41D2-9A24-B3A449ED64C4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}