CVE-2010-1194
EPSS 0.31%發布日:2010/3/31修改日:2026/4/28
描述
The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName.
受影響套件(1)
- Debian/libesmtpfrom 0, < 1.0.4-2