Oval Definition:oval:com.ubuntu.bionic:def:20123523000
Revision Date:2012-11-11Version:1
Title:CVE-2012-3523 on Ubuntu 18.04 LTS (bionic) - low.
Description:The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-3523
Platform(s):Ubuntu 18.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 18.04 LTS (bionic) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'inn' package in bionic is not affected (note: 'code not present').
  • OR NOT While related to the CVE in some way, the 'inn2' package in bionic is not affected (note: '2.5.3-1').
    • BACK