https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:10:18 +0000 https://cve.radiocsirt.org/vuln/certa-2011-avi-146 certa-2011-avi-146 https://cve.radiocsirt.org/vuln/certa-2011-avi-146 https://cve.radiocsirt.org/vuln/euvd-2026-113984 EUVD-2026-113984 https://cve.radiocsirt.org/vuln/euvd-2026-113984 https://cve.radiocsirt.org/vuln/fkie_cve-2011-0411 <p>The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a &#34;plaintext command injection&#34; attack.</p> <p>The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a &#34;plaintext command injection&#34; attack.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-0411 https://cve.radiocsirt.org/vuln/ghsa-2gf2-4wwm-4cm6 <p>The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a &#34;plaintext command injection&#34; attack.</p> <p>The STARTTLS implementation in Postfix 2.4.x before 2.4.16, 2.5.x before 2.5.12, 2.6.x before 2.6.9, and 2.7.x before 2.7.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a &#34;plaintext command injection&#34; attack.</p> https://cve.radiocsirt.org/vuln/ghsa-2gf2-4wwm-4cm6 https://cve.radiocsirt.org/vuln/gsd-2011-0411 gsd-2011-0411 https://cve.radiocsirt.org/vuln/gsd-2011-0411 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10318-1 <p>pure-ftpd-1.0.43-1.3 on GA media</p> <p>pure-ftpd-1.0.43-1.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10318-1 https://cve.radiocsirt.org/vuln/rhsa-2011:0422 <p>postfix improper mailbox permissions postfix: SMTP commands injection during plaintext to TLS session switch</p> <p>postfix improper mailbox permissions postfix: SMTP commands injection during plaintext to TLS session switch</p> https://cve.radiocsirt.org/vuln/rhsa-2011:0422