Lucene search
CanonicalCVELIST:CVE-2010-1194HistoryMar 31, 2010 - 5:35 p.m.
CVE-2010-1194
2010-03-3117:35:00
canonical
www.cve.org
1
The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName.
Related
cve
cve
CVE-2010-1194
2010-03-31 18:00:00
prion
prion
Code injection
2010-03-31 18:00:00
nvd
nvd
CVE-2010-1194
2010-03-31 18:00:00
debiancve
debiancve
CVE-2010-1194
2010-03-31 18:00:00
ubuntucve
ubuntucve
CVE-2010-1194
2010-03-31 00:00:00
nessus
nessus
openSUSE Security Update : libesmtp (openSUSE-SU-2010:0220-1)
2010-05-07 00:00:00
SuSE 11 Security Update : libesmtp (SAT Patch Number 2390)
2010-12-02 00:00:00
openSUSE Security Update : libesmtp (openSUSE-SU-2010:0220-1)
2010-05-07 00:00:00
securityvulns
securityvulns
libESMTP SSL vulnerabilities
2010-10-08 00:00:00
[ MDVSA-2010:195 ] libesmtp
2010-10-08 00:00:00
openvas
openvas
libESMTP multiple vulnerabilities
2010-04-06 00:00:00
libESMTP <= 1.0.4 Multiple Vulnerabilities
2010-04-06 00:00:00
Mandriva Update for libesmtp MDVSA-2010:195 (libesmtp)
2010-10-19 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package libesmtp version 1.0.6-alt1
2010-10-05 00:00:00