Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-0772. PoCs published by tintinweb.
AI-analyzed exploit summary This PoC demonstrates a STARTTLS stripping vulnerability in Python's smtplib, where a MITM can downgrade the connection to plaintext by sending an invalid response code (200 instead of 220) to the STARTTLS command, bypassing encryption without raising an exception.
Description
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
Exploits (1)
This PoC demonstrates a STARTTLS stripping vulnerability in Python's smtplib, where a MITM can downgrade the connection to plaintext by sending an invalid response code (200 instead of 220) to the STARTTLS command, bypassing encryption without raising an exception.
References (18)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N