oss-sec mailing list archives

Re: Requesting a CVE id for Trojita, an e-mail client: SSL stripping

From: cve-assign () mitre org
Date: Thu, 20 Mar 2014 15:42:09 -0400 (EDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

the automatic saving into the "sent" or "draft" folders could happen
over a plaintext connection even if the user's preferences specify
STARTTLS as a requirement.


Use CVE-2014-2567.

- -- 
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)

iQEcBAEBAgAGBQJTK0KBAAoJEKllVAevmvmsIX8H/0o4Jw4VigZRdckL7CCRG5Or
1Y573jSNBl6z3e37f1tAAb6fWcyNI0KCzfwmYMJ+7ji4retIRW/fpcV9BtExBYwF
pMcLUGXAAebuzpbYwNoS/+S4uLKb5AH8aE1N5hOMBrqWDWMnIowpSvalGodv002Z
6OEHwCdG9iH+2z3OfQoxzGLZpysnIqihvS+4/vStQZoyFVA1Ow7sqfqQFBhGGOzk
YTWRyhMERJpL0Dmau9Z3KyuZkYT8U6DUzhm/C86eQZWv3EvVDkMxiME6vOmj4LDC
6GEOr5vlMtEjAItyHHmWKHCP9fpTlcb0kPqi+Rlg7F503vKT4I5tqQ5HYT5QGFM=
=Qh8t
-----END PGP SIGNATURE-----

Current thread:

Requesting a CVE id for Trojitá, an e-mail client: SSL stripping Jan Kundrát (Mar 19)
- Re: Requesting a CVE id for Trojita, an e-mail client: SSL stripping cve-assign (Mar 20)
  - Re: Requesting a CVE id for Trojita, an e-mail client: SSL stripping Jan Kundrát (Mar 20)