Vulnerability Details CVE-2013-4584
Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers not being applied to STARTTLS connections
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.9%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
References
- http://www.openwall.com/lists/oss-security/2013/11/15/6
- http://www.securityfocus.com/bid/63696
- https://access.redhat.com/security/cve/cve-2013-4584
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89184
- https://github.com/horms/perdition/commit/62a0ce94aeb7dd99155882956ce9e327ab914ddf
- https://security-tracker.debian.org/tracker/CVE-2013-4584
- http://www.openwall.com/lists/oss-security/2013/11/15/6
- http://www.securityfocus.com/bid/63696
- https://access.redhat.com/security/cve/cve-2013-4584
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89184
- https://github.com/horms/perdition/commit/62a0ce94aeb7dd99155882956ce9e327ab914ddf
- https://security-tracker.debian.org/tracker/CVE-2013-4584
Products affected by CVE-2013-4584
-
cpe:2.3:a:horms:perdition:-
-
cpe:2.3:a:horms:perdition:0.0.0
-
cpe:2.3:a:horms:perdition:0.1.0
-
cpe:2.3:a:horms:perdition:0.1.1
-
cpe:2.3:a:horms:perdition:0.1.10
-
cpe:2.3:a:horms:perdition:0.1.2
-
cpe:2.3:a:horms:perdition:0.1.3
-
cpe:2.3:a:horms:perdition:0.1.4
-
cpe:2.3:a:horms:perdition:0.1.5
-
cpe:2.3:a:horms:perdition:0.1.6
-
cpe:2.3:a:horms:perdition:0.1.7
-
cpe:2.3:a:horms:perdition:0.1.8
-
cpe:2.3:a:horms:perdition:0.1.9
-
cpe:2.3:a:horms:perdition:1.11
-
cpe:2.3:a:horms:perdition:1.12
-
cpe:2.3:a:horms:perdition:1.13
-
cpe:2.3:a:horms:perdition:1.14
-
cpe:2.3:a:horms:perdition:1.15
-
cpe:2.3:a:horms:perdition:1.17
-
cpe:2.3:a:horms:perdition:1.17.1
-
cpe:2.3:a:horms:perdition:1.18
-
cpe:2.3:a:horms:perdition:1.19
-
cpe:2.3:a:horms:perdition:2.0
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0