Unrated
Fetchmail before 6.4.22 fails to enforce STARTTLS session encryption in some circumstances, such as a certain situation with IMAP and PREAUTH.
CVE-2021-39272
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-39272 fetchmail Fixed in: 6.4.22-1
References
- advisory openwall.com
- advisory nostarttls.secvuln.info
- advisory security.gentoo.org
- advisory fetchmail.info
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org