Debian/libesmtp: unknown
The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attack
Action: Upgrade libesmtp to 1.0.4-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.4-2 | - |
Fixed versions
| 1.0.4-2 |
Sources
published · modified · JSON