CVE-2007-1558 The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level is...
LowCVSS 2.6
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions. NOTE: this design-level issue potentially affects all products that use APOP, including (1) Thunderbird 1.x before 1.5.0.12 and 2.x before 2.0.0.4, (2) Evolution, (3) mutt, (4) fetchmail before 6.3.8, (5) SeaMonkey 1.0.x before 1.0.9 and 1.1.x before 1.1.2, (6) Balsa 2.3.16 and earlier, (7) Mailfilter before 0.8.2, and possibly other products.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apop protocol | All versions | No fix listed |
| debian/balsa(Debian:12) | < 2.3.17-1 | 2.3.17-1 |
| debian/balsa(Debian:13) | < 2.3.17-1 | 2.3.17-1 |
| debian/balsa(Debian:14) | < 2.3.17-1 | 2.3.17-1 |
| debian/claws-mail(Debian:12) | < 2.9.1-1 | 2.9.1-1 |
| debian/claws-mail(Debian:13) | < 2.9.1-1 | 2.9.1-1 |
| debian/claws-mail(Debian:14) | < 2.9.1-1 | 2.9.1-1 |
| debian/fetchmail(Debian:12) | < 6.3.8-1 | 6.3.8-1 |
| debian/fetchmail(Debian:13) | < 6.3.8-1 | 6.3.8-1 |
| debian/fetchmail(Debian:14) | < 6.3.8-1 | 6.3.8-1 |
| debian/mailfilter(Debian:12) | < 0.8.2-1 | 0.8.2-1 |
| debian/mailfilter(Debian:13) | < 0.8.2-1 | 0.8.2-1 |
| debian/mailfilter(Debian:14) | < 0.8.2-1 | 0.8.2-1 |
| debian/mutt(Debian:12) | < 1.5.18-6 | 1.5.18-6 |
| debian/mutt(Debian:13) | < 1.5.18-6 | 1.5.18-6 |
| debian/mutt(Debian:14) | < 1.5.18-6 | 1.5.18-6 |
References
- balsa.gnome.org
- docs.info.apple.com
- fetchmail.berlios.de
- HPSBUX02153 vendor-advisory
- HPSBUX02156 vendor-advisory
- APPLE-SA-2007-05-24 vendor-advisory
- [balsa-list] 20070704 balsa-2.3.17 released mailing-list
- 25353 third-party-advisory
- 25402 third-party-advisory vendor-advisory
- 25476 third-party-advisory
- 25496 third-party-advisory vendor-advisory
- 25529 third-party-advisory vendor-advisory
- 25534 third-party-advisory
- 25546 third-party-advisory vendor-advisory
- 25559 third-party-advisory
- 25664 third-party-advisory
- 25750 third-party-advisory
- 25798 third-party-advisory
- 25858 third-party-advisory
- 25894 third-party-advisory
- 26083 third-party-advisory
- 26415 third-party-advisory
- 35699 third-party-advisory
- GLSA-200706-06 vendor-advisory
- SSA:2007-152-02 vendor-advisory
- sourceforge.net
- sylpheed.sraoss.jp
- www.claws-mail.org
- DSA-1300 vendor-advisory
- DSA-1305 patch vendor-advisory
- MDKSA-2007:105 vendor-advisory
- MDKSA-2007:107 vendor-advisory
- MDKSA-2007:113 vendor-advisory
- MDKSA-2007:119 vendor-advisory
- MDKSA-2007:131 vendor-advisory
- www.mozilla.org patch vendor-advisory
- SUSE-SR:2007:014 vendor-advisory
- SUSE-SA:2007:036 vendor-advisory
- [oss-security] 20090815 mailfilter 0.8.2 fixes CVE-2007-1558 (APOP) mailing-list
- [oss-security] 20090818 Re: CVE-2007-1558 update (was: mailfilter 0.8.2 fixes CVE-2007-1558 (APOP)) mailing-list
- RHSA-2007:0344 vendor-advisory
- RHSA-2007:0353 vendor-advisory
- RHSA-2007:0385 vendor-advisory
- RHSA-2007:0386 vendor-advisory
- RHSA-2007:0401 vendor-advisory
- RHSA-2007:0402 vendor-advisory
- RHSA-2009:1140 vendor-advisory
- 20070402 APOP vulnerability mailing-list vendor-advisory
- 20070403 Re: APOP vulnerability mailing-list
- 20070531 FLEA-2007-0023-1: firefox mailing-list
- 20070615 rPSA-2007-0122-1 evolution-data-server mailing-list
- 20070619 FLEA-2007-0026-1: evolution-data-server mailing-list
- 20070620 FLEA-2007-0027-1: thunderbird mailing-list
- 23257 patch vdb-entry
- 1018008 vdb-entry
- 2007-0019 vendor-advisory
- 2007-0024 vendor-advisory
- USN-469-1 vendor-advisory
- USN-520-1 vendor-advisory
- TA07-151A third-party-advisory us-government-resource
- ADV-2007-1466 vdb-entry
- ADV-2007-1467 vdb-entry
- ADV-2007-1468 vdb-entry
- ADV-2007-1480 vdb-entry
- ADV-2007-1939 vdb-entry
- ADV-2007-1994 vdb-entry
- ADV-2007-2788 vdb-entry
- ADV-2008-0082 vdb-entry
- issues.rpath.com
- issues.rpath.com
- issues.rpath.com
- oval:org.mitre.oval:def:9782 signature vdb-entry
- Debian Security Tracker CVE-2007-1558 vendor-advisory