← Back

Courier Mta

courier-mta

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Courtier Authlib
courtier-authlib
2 CVEs
Courier Mail Server
courier_mail_server
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-38084
1Courier Mta
1Courier Mail Server
Jun 17, 2026
Aug 3, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user se...Show more
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.Show less
CVE-2008-2380
1Courier Mta
1Courtier Authlib
Apr 23, 2026
Dec 22, 2008
N/A· v4
N/A· v3
5.1 MEDIUM· v2
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing...Show more
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes.Show less
CVE-2008-2667
1Courier Mta
1Courtier Authlib
Apr 23, 2026
Jul 7, 2008
N/A· v4
N/A· v3
5.1 MEDIUM· v2
SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote...Show more
SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.Show less