dovecot: certificate validation flaw
| Package(s): | dovecot | CVE #(s): | CVE-2011-4318 | ||||||||||||||||||||||||||||||||
| Created: | December 9, 2011 | Updated: | February 21, 2013 | ||||||||||||||||||||||||||||||||
| Description: | From the Ubuntu advisory: It was discovered that Dovecot incorrectly validated certificate hostnames when being used as a POP3 and IMAP proxy. If a remote attacker were able to perform a man-in-the-middle attack, this flaw could be exploited to view sensitive information. | ||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||