CVE-2011-3355

evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to store sent email messages into the Sent folder, when the Sent folder was located on the remote server. An attacker could use this flaw to obtain login credentials of the victim.

• CWE-311

• https://access.redhat.com/security/cve/cve-2011-3355Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641052Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3355Issue Tracking, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3355Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/09/09/1Exploit, Mailing List
• https://access.redhat.com/security/cve/cve-2011-3355Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=641052Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3355Issue Tracking, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3355Third Party Advisory
• https://www.openwall.com/lists/oss-security/2011/09/09/1Exploit, Mailing List

Published

Nov 25, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3349lightdm before 0.9.6 writes in .dmrc and Xauthority files us…7.8
• CVE-2011-3350masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in…9.8
• CVE-2011-3351openvas-scanner before 2011-09-11 creates a temporary file i…7.1
• CVE-2011-3352Zikula 1.3.0 build #3168 and probably prior has XSS flaw due…4.8
• CVE-2011-3353Buffer overflow in the fuse_notify_inval_entry function in f…5.5
• CVE-2011-3354The CtcpParser::packedReply method in core/ctcpparser.cpp in…
• CVE-2011-3356Multiple cross-site scripting (XSS) vulnerabilities in confi…
• CVE-2011-3357Directory traversal vulnerability in bug_actiongroup_ext_pag…
• CVE-2011-3358Multiple cross-site scripting (XSS) vulnerabilities in Manti…
• CVE-2011-3359The dma_rx function in drivers/net/wireless/b43/dma.c in the…7.5
• CVE-2011-3360Untrusted search path vulnerability in Wireshark 1.4.x befor…
• CVE-2011-3361Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in…