https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:51:57 +0000 https://cve.radiocsirt.org/vuln/certa-2007-avi-234 certa-2007-avi-234 https://cve.radiocsirt.org/vuln/certa-2007-avi-234 https://cve.radiocsirt.org/vuln/euvd-2026-133523 EUVD-2026-133523 https://cve.radiocsirt.org/vuln/euvd-2026-133523 https://cve.radiocsirt.org/vuln/fkie_cve-2007-1558 <p>The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.</p> <p>The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-1558 https://cve.radiocsirt.org/vuln/ghsa-jmh6-7c53-fg26 <p>The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.</p> <p>The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.</p> https://cve.radiocsirt.org/vuln/ghsa-jmh6-7c53-fg26 https://cve.radiocsirt.org/vuln/gsd-2007-1558 gsd-2007-1558 https://cve.radiocsirt.org/vuln/gsd-2007-1558 https://cve.radiocsirt.org/vuln/jvndb-2007-000295 <p>POP3 is a protocol for receiving email from mail servers. APOP is an authentication mechanism used by the POP3 protocol. It is reported that APOP passwords could be recovered by third parties. In its successful attack, the attacker spoofs itself as the mail server, provides challenge strings to the client, and collects the responses from the client. The attacker should repeat this process for a certain period of time without alerting the user of the attack.</p> <p>POP3 is a protocol for receiving email from mail servers. APOP is an authentication mechanism used by the POP3 protocol. It is reported that APOP passwords could be recovered by third parties. In its successful attack, the attacker spoofs itself as the mail server, provides challenge strings to the client, and collects the responses from the client. The attacker should repeat this process for a certain period of time without alerting the user of the attack.</p> https://cve.radiocsirt.org/vuln/jvndb-2007-000295 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10686-1 <p>claws-mail-4.0.0-2.5 on GA media</p> <p>claws-mail-4.0.0-2.5 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10686-1 https://cve.radiocsirt.org/vuln/rhsa-2007:0344 <p>fetchmail/mutt/evolution/...: APOP password disclosure vulnerability</p> <p>fetchmail/mutt/evolution/...: APOP password disclosure vulnerability</p> https://cve.radiocsirt.org/vuln/rhsa-2007:0344