💣Exploit CVE-2024-34083 - aiosmptd is a reimplementation of the Python stdl

[Maksim]

CVE ID : CVE-2024-34083
Published : May 18, 2024, 7:15 p.m. | 16 minutes ago
Description : aiosmptd is a reimplementation of the Python stdlib smtpd.py based on asyncio. Prior to version 1.4.6, servers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a man-in-the-middle attack. Version 1.4.6 contains a patch for the issue.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.