tocsin

Debian/sendmail: unknown

sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP ser

Action: Upgrade sendmail to 8.14.3-9.1 or later.

Affected

introducedfixedlast affected
08.14.3-9.1-

Fixed versions

8.14.3-9.1

Sources

published · modified · JSON