CVE-2011-3355: High severity evolution data server vulnerability
evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-3355?
CVE-2011-3355 is classified as a moderate severity vulnerability due to the potential exposure of login credentials.
How do I fix CVE-2011-3355?
To mitigate CVE-2011-3355, upgrade to a version of evolution-data-server3 beyond 3.2.1 where the insecure connection issue is resolved.
What software is affected by CVE-2011-3355?
CVE-2011-3355 affects evolution-data-server3 versions from 3.0.3 to 3.2.1.
What type of attack is possible with CVE-2011-3355?
An attacker can exploit CVE-2011-3355 to intercept and obtain the login credentials of victims using insecure connections.
Is CVE-2011-3355 related to remote servers?
Yes, CVE-2011-3355 specifically impacts users storing sent messages on remote servers without an SSL connection.