Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

stafford.uklinux libesmtp 1.0.1 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2010-1192
libESMTP, probably 1.0.4 and previous versions, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle malicious users to spoof arbitrary SSL servers via a crafted c...
Stafford.uklinux Libesmtp 1.0.2Stafford.uklinux Libesmtp 1.0.1Stafford.uklinux Libesmtp 0.8.9Stafford.uklinux Libesmtp 0.8.8Stafford.uklinux Libesmtp 0.8.0Stafford.uklinux Libesmtp 0.7.1Stafford.uklinux Libesmtp 0.3Stafford.uklinux Libesmtp 0.2Stafford.uklinux Libesmtp 0.8.12Stafford.uklinux Libesmtp 0.8.11Stafford.uklinux Libesmtp 0.8.4Stafford.uklinux Libesmtp 0.8.3Stafford.uklinux Libesmtp 0.6Stafford.uklinux Libesmtp 1.0Stafford.uklinux Libesmtp 0.8.7Stafford.uklinux Libesmtp 0.8.6Stafford.uklinux Libesmtp 0.8.5Stafford.uklinux Libesmtp 0.7.0Stafford.uklinux Libesmtp 0.6.1Stafford.uklinux Libesmtp 0.1Stafford.uklinux LibesmtpStafford.uklinux Libesmtp 1.0.3
NA
CVE-2010-1194
The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote malicious users to spoof trusted certificates via a crafted subjectAltName.
Stafford.uklinux Libesmtp 1.0.1Stafford.uklinux Libesmtp 1.0.2Stafford.uklinux Libesmtp 0.8.10Stafford.uklinux Libesmtp 0.8.9Stafford.uklinux Libesmtp 0.8.2Stafford.uklinux Libesmtp 0.8.0Stafford.uklinux Libesmtp 0.6Stafford.uklinux Libesmtp 0.3Stafford.uklinux Libesmtp 0.1Stafford.uklinux Libesmtp 1.0.3Stafford.uklinux Libesmtp 1.0.4Stafford.uklinux Libesmtp 0.8.12Stafford.uklinux Libesmtp 0.8.6Stafford.uklinux Libesmtp 0.8.5Stafford.uklinux Libesmtp 0.7.1Stafford.uklinux Libesmtp 0.2Stafford.uklinux Libesmtp 0.8.11Stafford.uklinux Libesmtp 0.8.3Stafford.uklinux Libesmtp 0.8.4Stafford.uklinux Libesmtp 0.5Stafford.uklinux Libesmtp 0.6.1Stafford.uklinux Libesmtp 1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook