CVE-2010-1194
EPSS 0.31%Published: 3/31/2010Modified: 4/28/2026
Description
The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName.
Affected packages (1)
- Debian/libesmtpfrom 0, < 1.0.4-2