CVE-2011-1432: The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows...

Security readout for executives and security teams

This CVE describes a flaw in SCO SCOoffice Server’s SMTP STARTTLS handling. A network attacker positioned between client and server could cause a cleartext SMTP command to be processed after encryption begins, undermining session integrity. The source bundle does not provide a CVSS score, affected versions, active exploitation evidence, or a named patch. Exposure is most likely limited to organizations still running SCO SCOoffice Server with SMTP STARTTLS reachable by users or mail relays. Internet-facing SMTP, shared networks, or untrusted network paths increase concern. The provided affected-product data is incomplete and lists no normalized versions or CPEs. Treat as a legacy mail-platform risk. Prioritize only if SCO SCOoffice Server is still present, especially on exposed SMTP paths. If not present, record as not applicable. If present and unsupported, plan replacement or isolation rather than relying on incomplete historical patch information. Mitigation focus: Inventory any SCO SCOoffice Server deployments and exposed SMTP services.; Check SCO or surviving vendor guidance for supported fixes or retirement advice.; Upgrade, replace, or isolate unsupported SCOoffice mail infrastructure..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.