Back to Database
Status published
Medium
CVE-2014-2576
plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check...
Vulnerability Description
plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-2576
Credits & Attribution
No credits recorded in the NVD database.
References
More from claws-mail
View All →CVE-2021-37746
textview_uri_security_check in textview.c in Claws Mail before 3.18.0, and Sylpheed...
Medium
6.1
CVE-2020-16094
In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP...
High
7.5
CVE-2020-15917
common/session.c in Claws Mail before 3.17.6 has a protocol violation...
Critical
9.8
CVE-2019-10735
In Claws Mail 3.14.1, an attacker in possession of S/MIME...
Medium
4.3
CVE-2015-8708
Stack-based buffer overflow in the conv_euctojis function in codeconv.c in...
High
7.3
Affected Vendor
claws-mail
View all reports →Affected Software
claws-mail, opensuse
Vulnerable Versions:
0, 12.3, 13.1
Timeline
Official Publish:
October 15th, 2014
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.