← Back

Offlineimap

offlineimap

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Offlineimap
offlineimap
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-4533
2Debian
Offlineimap
2Debian Linux
Offlineimap
Nov 21, 2024
Nov 13, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
offlineimap before 6.3.4 added support for SSL server certificate validation but it is still possible to use SSL v2 protocol, which is a flawed protocol with multiple security deficiencies.
CVE-2010-4532
2Debian
Offlineimap
2Debian Linux
Offlineimap
Nov 21, 2024
Nov 13, 2019
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
offlineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes" option is specified which can allow man-in-the-middle attacks.