CVE-2014-2014

Related Files

Mandriva Linux Security Advisory 2014-060

Posted Mar 14, 2014

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2014-060 - Imapsync, by default, runs a release check when executed, which causes imapsync to connect to http://imapsync.lamiral.info and send information about the version of imapsync, the operating system and perl. The imapsync package has been patched to disable this feature. In imapsync before 1.584, a certificate verification failure when using the --tls option results in imapsync attempting a cleartext login.

tags | advisory, web, perl

systems | linux, mandriva

advisories | CVE-2013-4279, CVE-2014-2014

SHA-256 | d7179931ea113dcaae71ae75cb498eeb6441d0deded88193dfac9bedc9b4b1b6

Download | Favorite | View