Medium severity5.9NVD Advisory· Published Aug 17, 2021· Updated Jun 17, 2026

CVE-2020-15955

Description

In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credentials to be sent to the MitM attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

s/qmail/s/qmaildescription
S/qmail/s/qmailllm-create
Range: <=4.0.07
Fehcom/S\/qmail
cpe:2.3:a:fehcom:s\/qmail:*:*:*:*:*:*:*:*
Range: <=4.0.07

Patches

Vulnerability mechanics

References

www.fehcom.de/sqmail/sqmail.htmlnvdPatchRelease NotesVendor Advisory
nostarttls.secvuln.infonvdTechnical DescriptionThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000