CVE-2016-0772 The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypas...
MediumCVSS 6.5
EPSS 15.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/python2.7(Debian:11) | < 2.7.12~rc1-1 | 2.7.12~rc1-1 |
| python | = 3.5.0 | No fix listed |
| python | = 3.5.1 | No fix listed |
| python | = 3.0 | No fix listed |
| python | = 3.0.1 | No fix listed |
| python | = 3.1.0 | No fix listed |
| python | = 3.1.1 | No fix listed |
| python | = 3.1.2 | No fix listed |
| python | = 3.1.3 | No fix listed |
| python | = 3.1.4 | No fix listed |
| python | = 3.1.5 | No fix listed |
| python | = 3.2.0 | No fix listed |
| python | = 3.2.1 | No fix listed |
| python | = 3.2.2 | No fix listed |
| python | = 3.2.3 | No fix listed |
| python | = 3.2.4 | No fix listed |
| python | = 3.2.5 | No fix listed |
| python | = 3.2.6 | No fix listed |
| python | = 3.3.0 | No fix listed |
| python | = 3.3.1 | No fix listed |
| python | = 3.3.2 | No fix listed |
| python | = 3.3.3 | No fix listed |
| python | = 3.3.4 | No fix listed |
| python | = 3.3.5 | No fix listed |
| python | = 3.3.6 | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| python | = 3.4.0 | No fix listed |
| python | = 3.4.1 | No fix listed |
| python | = 3.4.2 | No fix listed |
| python | = 3.4.3 | No fix listed |
| python | = 3.4.4 | No fix listed |
| python | <= 2.7.11 | No fix listed |
References
- security-tracker.debian.org vendor-advisory
- openSUSE-SU-2020:0086 vendor-advisory
- RHSA-2016:1626 vendor-advisory
- RHSA-2016:1627 vendor-advisory
- RHSA-2016:1628 vendor-advisory
- RHSA-2016:1629 vendor-advisory
- RHSA-2016:1630 vendor-advisory
- [oss-security] 20160614 Python CVE-2016-0772: smtplib StartTLS stripping attack mailing-list
- 91225 vdb-entry
- www.splunk.com
- www.splunk.com
- bugzilla.redhat.com issue-tracking third-party-advisory
- docs.python.org release-notes
- docs.python.org release-notes
- hg.python.org release-notes
- hg.python.org patch
- hg.python.org patch
- [debian-lts-announce] 20190207 [SECURITY] [DLA 1663-1] python3.4 security update mailing-list
- GLSA-201701-18 vendor-advisory