43676

VU#555316

http://www.kb.cert.org/vuls/id/MAPG-8DBRD4

71020

46767

ADV-2011-0609

multiple-starttls-command-execution(65932)

The remote SMTP service contains a software flaw in its STARTTLS implementation that could allow a remote, unauthenticated attacker to inject commands during the plaintext protocol phase that will be executed during the ciphertext protocol phase. 

Successful exploitation could allow an attacker to steal a victim's email or associated SASL (Simple Authentication and Security Layer) credentials.

CVE-2011-1430

medium

Tenable Plugins

medium