PT-2018-3530
CVE-2019-8337
·
Published
2018-12-13
·
Updated
2024-06-15
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
msmtp version 1.8.2
mpop version 1.4.3
Description:
The issue is related to the
tls trust file command in the msmtp and mpop clients, which is associated with improper certificate authentication verification. This could allow a remote attacker to impact the integrity, availability, and confidentiality of information.Recommendations:
For msmtp version 1.8.2, consider updating the configuration of
tls trust file to properly check certificate-verification results.
For mpop version 1.4.3, review and adjust the tls trust file settings to ensure correct authentication of certificates. Found an issue in the description? Have something to add? Feel free to write us 👾