CVE-2016-10937: High severity Imapfilter Project Imapfilter vulnerability
IMAPFilter through 2.6.12 does not validate the hostname in an SSL certificate.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/imapfilterto a version that resolves this vulnerability.Fixed in 1:2.5.2-2+deb8u1build0.14.04.1~esm1 - Upgrade
Upgrade
ubuntu/imapfilterto a version that resolves this vulnerability.Fixed in 1:2.6.4-1ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/imapfilterto a version that resolves this vulnerability.Fixed in 1:2.6.11-1ubuntu0.1~esm1
Event History
Frequently Asked Questions
What is the severity of CVE-2016-10937?
CVE-2016-10937 is classified as a medium severity vulnerability due to its potential impact on SSL certificate validation.
How do I fix CVE-2016-10937?
To remediate CVE-2016-10937, upgrade Imapfilter to version 2.6.13 or later where the hostname validation issues are addressed.
What systems are affected by CVE-2016-10937?
CVE-2016-10937 affects versions of Imapfilter up to 2.6.12 on various distributions including Debian and Fedora.
Is CVE-2016-10937 easily exploitable?
Exploitation of CVE-2016-10937 requires an attacker to present a valid SSL certificate, making it dependent on specific conditions.
What is the impact of CVE-2016-10937 on security?
The impact of CVE-2016-10937 can lead to man-in-the-middle attacks if the hostname validation in SSL certificates is bypassed.