General Information

POP3 Injection

Variants:
Direct Persistent Session 

Also Known As:
POP3 MX Injection

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Input Validation, Syntax Escaping

Invented In:
01/07/2009

Added In:
08/12/2014


Vector Operation Method:
Malicious inputs can affect the structure of POP3 requests generated in the server


Direct Variant:

POP3 Injection

Also Known As:
POP3 MX Injection

Typical Severity:
Medium

Resources:

White Papers:

Learn More:


Persistent Variant:

Stored POP3 Injection

Also Known As:
Persistent POP3 Injection

Typical Severity:
Medium

Resources:

White Papers:

Learn More:


Session Variant:

POP3 Injection via Session Puzzling

Also Known As:
Session POP3 Injection

Typical Severity:
Medium

Resources:

White Papers:

Learn More: