DEBIAN-CVE-2014-5369

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2014-5369

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-5369.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2014-5369

Upstream

CVE-2014-5369

Published

2014-09-08T14:55:03.030Z

Modified

2025-11-19T02:04:27.139046Z

Summary

[none]

Details

Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which allows remote attackers to obtain sensitive information by sniffing the network.

References

https://security-tracker.debian.org/tracker/CVE-2014-5369

Affected packages

Debian:11 / enigmail

Package

Name: enigmail
Purl: pkg:deb/debian/enigmail?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:1.7.2-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-5369.json"