Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fetchmail 用户认证的加密方式口令信息泄露漏洞
Vulnerability Description
Fetchmail是免费的软件包，可以从远程POP2、POP3、IMAP、ETRN或ODMR服务器检索邮件并将其转发给本地SMTP、LMTP服务器或消息传送代理。 Fetchmail在处理用户认证的加密方式时存在漏洞，远程攻击者可能利用此漏洞非授权获取认证数据利用中间人攻击。 即使已经配置为使用强加密，在很多情况下fetchmail仍可能会使用明文认证，这可能会导致泄漏口令信息。
CVSS Information
N/A
Vulnerability Type
N/A