CVE:CVE-2020-15953
CNNVD:CNNVD-202007-1540
LibEtPan是Hoà V. DINH软件开发者的一款为IMAP、SMTP、POP和NNTP等多种邮件访问提供可移植框架的库。
LibEtPan 1.9.4及之前版本（用在MailCore 2版本至0.6.3版本和其他产品中）中存在注入漏洞。攻击者可利用该漏洞实施中间人攻击，访问通信通道，进而获取敏感信息或入侵系统。
solution:Upgrade libetpan_project libetpan to a higher version than 1.9.4,and avoid the version (,1.9.4]; Upgrade libmailcore mailcore2 to a higher version than 0.6.3,and avoid the version (,0.6.3]; Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0