This script is Copyright (C) 2014 Tenable Network Security, Inc.
The remote FreeBSD host is missing a security-related update.
Richard J. Moore reports :
The POP3 kioslave used by KMail will accept invalid certificates
without presenting a dialog to the user due a bug that leads to an
inability to display the dialog combined with an error in the way the
result is checked.
This flaw allows an active attacker to perform MITM attacks against
the ioslave which could result in the leakage of sensitive data such
as the authentication details and the contents of emails.
See also :
Update the affected package.
Risk factor :
Medium / CVSS Base Score : 4.3
CVSS Temporal Score : 3.7
Public Exploit Available : true