CVE-2011-1430

The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

• CWE-20

• http://secunia.com/advisories/43676Vendor Advisory
• http://www.kb.cert.org/vuls/id/555316US Government Resource
• http://www.kb.cert.org/vuls/id/MAPG-8DBRD4US Government Resource
• http://www.osvdb.org/71020
• http://www.securityfocus.com/bid/46767
• http://www.vupen.com/english/advisories/2011/0609Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65932
• http://secunia.com/advisories/43676Vendor Advisory
• http://www.kb.cert.org/vuls/id/555316US Government Resource
• http://www.kb.cert.org/vuls/id/MAPG-8DBRD4US Government Resource
• http://www.osvdb.org/71020
• http://www.securityfocus.com/bid/46767
• http://www.vupen.com/english/advisories/2011/0609Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65932

Published

Mar 16, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1424The default configuration of ExShortcut\Web.config in EMC So…
• CVE-2011-1425xslt.c in XML Security Library (aka xmlsec) before 1.2.17, a…
• CVE-2011-1426The OpenURLInDefaultBrowser method in RealNetworks RealPlaye…
• CVE-2011-1427Multiple cross-site scripting (XSS) vulnerabilities in Kodak…
• CVE-2011-1428Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and ea…
• CVE-2011-1429Mutt does not verify that the smtps server hostname matches …
• CVE-2011-1431The STARTTLS implementation in qmail-smtpd.c in qmail-smtpd …
• CVE-2011-1432The STARTTLS implementation in SCO SCOoffice Server does not…
• CVE-2011-1433The (1) AgentInterface and (2) CustomerInterface components …
• CVE-2011-1434Google Chrome before 11.0.696.57 does not ensure thread safe…
• CVE-2011-1435Google Chrome before 11.0.696.57 does not properly implement…
• CVE-2011-1436Google Chrome before 11.0.696.57 on Linux does not properly …