CVE-2014-2567
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in...
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
Exploit likelihood
What each source reports
NVD Score used
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
- Record
CVE-2014-2567- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
- Record
CVE-2014-2567- Updated
- 2026-11-02
EUVDEUVD-2014-2602 No score
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
- Record
EUVD-2014-2602- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fxf2-wm9g-3jj2 No score
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in...
The OpenConnectionTask::handleStateHelper function in Imap/Tasks/OpenConnectionTask.cpp in Trojita before 0.4.1 allows man-in-the-middle attackers to trigger use of cleartext for saving a message into a (1) sent or (2) draft folder via a PREAUTH response that prevents later use of the STARTTLS command.
- Record
GHSA-fxf2-wm9g-3jj2- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10350-1 No score
trojita-0.7-1.4 on GA media
These are all security issues fixed in the trojita-0.7-1.4 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10350-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
trojitaopenSUSE:Tumbleweed |
before 0.7-1.4 | 0.7-1.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2567 is a medium vulnerability (CVSS 4.3) in Trojita Project Trojita, published March 21, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.98%, the 62nd percentile. Fixed in trojita 0.7-1.4.