---

CVE-2020-15953 - log back

CVE-2020-15953 edited at 10 Jan 2021 23:10:49
Severity	- Unknown + High
Remote	- Unknown + Local
Type	- Unknown + Man-in-the-middle
Description	+ LibEtPan 1.9.4 has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g., from a meddler-in-the-middle attacker) and evaluates it in a TLS context, aka "response injection."
References	+ https://github.com/dinhvh/libetpan/issues/386 + https://github.com/dinhvh/libetpan/pull/388 + https://github.com/dinhvh/libetpan/commit/1002a0121a8f5a9aee25357769807f2c519fa50b + https://github.com/dinhvh/libetpan/commit/298460a2adaabd2f28f417a0f106cb3b68d27df9
Notes

CVE-2020-15953 created at 10 Jan 2021 23:08:00