eXtremail 2.1.1 and previous versions does not verify the ID field (aka transaction id) in DNS responses, which makes it easier for remote malicious users to conduct DNS spoofing.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
extremail extremail 2.1 |
||
extremail extremail 2.1.1 |