Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd in the netqmail-1.06-tls patch for netqmail 1.06 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Netqmail netqmail-1.06-tls补丁STARTTLS实现明文命令注入漏洞
Vulnerability Description
netqmail 1.06版本的netqmail-1.06-tls补丁中的qmail-smtpd的qmail-smtpd.c中的STARTTLS实现没有正确限制I/O缓冲。中间人攻击者可以在TLS处理到位后，通过发送明文命令向加密的SMTP会话注入命令。
CVSS Information
N/A
Vulnerability Type
N/A