EDB-43500

PoC

Python smtplib 2.7.11 / 3.4.4 / 3.5.1 - Man In The Middle StartTLS Stripping

view exploit source exploit_dbtype localauthor tintinwebpublished 2016-07-03catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-0772US	medium6.5	15.4% (97th)	Exploit	2016-09-02
The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middl…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.