PT-2020-14734 · Unknown+4 · Mailcore 2+4

Published 2020-07-27 · Updated 2023-11-23 · CVE-2020-15953

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions LibEtPan versions 1.9.4 and earlier MailCore 2 versions 0.6.3 and earlier

Description The issue affects IMAP, SMTP, and POP3 protocols due to a STARTTLS buffering problem. When a server sends a "begin TLS" response, the client reads additional data, potentially from a meddler-in-the-middle attacker, and evaluates it in a TLS context. This is referred to as "response injection."

Recommendations For LibEtPan versions 1.9.4 and earlier, update to a version later than 1.9.4 to resolve the issue. For MailCore 2 versions 0.6.3 and earlier, update to a version later than 0.6.3 to resolve the issue. As a temporary workaround, consider restricting the use of STARTTLS in affected protocols until a patch is available.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

ALT-PU-2020-2908

ALT-PU-2020-2942

ALT-PU-2023-7015

ALT-PU-2023-7017

ALT-PU-2023-7051

ALT-PU-2023-7122

ALT-PU-2023-7434

CVE-2020-15953

DLA-2329-1

MGASA-2020-0366

OPENSUSE-SU-2020:1454-1

OPENSUSE-SU-2020:1505-1

OPENSUSE-SU-2020_1454-1

OPENSUSE-SU-2024:10938-1

USN-4598-1

Affected Products

Alt Linux

Libetpan

Mailcore 2

Suse

Ubuntu

References · 29

• 🔥 https://github.com/dinhvh/libetpan/issues/386 · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00075.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0366 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M65FVH5XPS23NLHFN3ABEGBSCHZAISXN · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00060.html · Vendor Advisory
• https://debian.org/lts/security/2020/dla-2329 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2329-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202007-55 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1454-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-15953 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-15953 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-15953 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0366.html · Security Note
• https://ubuntu.com/security/CVE-2020-15953 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:1505-1 · Vendor Advisory