Courier Mta vulnerabilities
3 vulnerabilities
Known vulnerabilities in Courier Mta products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Courtier Authlib2 vulnerabilities
- Courier Mail Server1 vulnerabilities
CVE-2021-38084courier-mtacourier_mail_server+2
EPSS score1.37%
An issue was discovered in the POP3 component of Courier Mail Server before 1.1.5. Meddler-in-the-middle attackers can pipeline commands after the POP3 STLS command, injecting plaintext commands into an encrypted user session.CVE-2008-2380courier-mtacourtier-authlib+1EPSS score1.82%
SQL injection vulnerability in authpgsqllib.c in Courier-Authlib before 0.62.0, when a non-Latin locale Postgres database is used, allows remote attackers to execute arbitrary SQL commands via query parameters containing apostrophes.CVE-2008-2667courier-mtacourtier-authlib+1EPSS score1.53%
SQL injection vulnerability in the Courier Authentication Library (aka courier-authlib) before 0.60.6 on SUSE openSUSE 10.3 and 11.0, and other platforms, when MySQL and a non-Latin character set are used, allows remote attackers to execute arbitrary SQL commands via the username and unspecified other vectors.