Security Advisory
CVE-2014-2576
6.8
Vulnerability Description
plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle (MITM) attacks.
Published Date
October 15, 2014
Official Source
NIST NVD Advisory