Unscored severity · published Mar 2, 2007
CVE-2007-1137
putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password…
–
CVSS
0.9%
EPSS
No
On KEV
Description
putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmail.py to send the username and password in plaintext while the user believes encryption is in use, and allows remote attackers to obtain sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PU
Putmail · Sourceforge
.8; .9; .10; .11; .12; 1.0; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1137
osvdb.org
http://osvdb.org/33764
putmail.sourceforge.net
http://putmail.sourceforge.net/home.html
Vendor Advisory
http://secunia.com/advisories/24266
www.securityfocus.com
http://www.securityfocus.com/bid/22718
www.vupen.com
http://www.vupen.com/english/advisories/2007/0753
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/32689