NVD

Id
7483  
Name
CVE-2011-0411  
Description
The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-03-16  
Modified Date
2016-12-07  
Seq
2011-0411  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42093 7483 CVE-2011-0411 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
42094 7483 CVE-2011-0411 APPLE-SA-2011-10-12-3  View
42095 7483 CVE-2011-0411 FEDORA-2011-3394  View
42096 7483 CVE-2011-0411 FEDORA-2011-3355  View
42097 7483 CVE-2011-0411 SUSE-SR:2011:009  View
42098 7483 CVE-2011-0411 GLSA-201206-33  View
42099 7483 CVE-2011-0411 1025179  View
42100 7483 CVE-2011-0411 http://support.apple.com/kb/HT5002  View
42101 7483 CVE-2011-0411 DSA-2233  View
42102 7483 CVE-2011-0411 VU#555316  View
42103 7483 CVE-2011-0411 http://www.kb.cert.org/vuls/id/MORO-8ELH6Z  View
42104 7483 CVE-2011-0411 http://www.oracle.com/technetwork/topics/security/cpuapr2011-301950.html  View
42105 7483 CVE-2011-0411 http://www.postfix.org/CVE-2011-0411.html  View
42106 7483 CVE-2011-0411 RHSA-2011:0422  View
42107 7483 CVE-2011-0411 RHSA-2011:0423  View
42108 7483 CVE-2011-0411 46767  View
42109 7483 CVE-2011-0411 ADV-2011-0611  View
42110 7483 CVE-2011-0411 ADV-2011-0752  View
42111 7483 CVE-2011-0411 ADV-2011-0891  View
42112 7483 CVE-2011-0411 multiple-starttls-command-execution(65932)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31118 JVNDB-2011-001357 複数の STARTTLS 実装に脆弱性 複数の STARTTLS の実装には、脆弱性が存在します。 CVE-2011-0411 48318 CVE-2011-0411 7483 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001357.html 2011-03-08 2013-08-09 View