Medium severity5.9NVD Advisory· Published Nov 15, 2019· Updated Jun 16, 2026

CVE-2013-4584

Description

Perdition before 2.2 may have weak security when handling outbound connections, caused by an error in the STARTTLS IMAP and POP server. ssl_outgoing_ciphers not being applied to STARTTLS connections

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Perdition/Perditionv5
Range: before 2.2
Perdition/Perditionllm-create
Range: <2.2
Horms/Perdition
cpe:2.3:a:horms:perdition:*:*:*:*:*:*:*:*
Range: <2.1
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2013/11/15/6nvdMailing ListPatchThird Party Advisory
github.com/horms/perdition/commit/62a0ce94aeb7dd99155882956ce9e327ab914ddfnvdPatch
www.securityfocus.com/bid/63696nvdThird Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/89184nvdThird Party AdvisoryVDB Entry
security-tracker.debian.org/tracker/CVE-2013-4584nvdThird Party Advisory
access.redhat.com/security/cve/cve-2013-4584nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000