Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Stafford.Uklinux libESMTP smtp-tls.c 'match_component'函数程序设计漏洞
Vulnerability Description
libesmtp是一款SMTP库，balsa邮件客户端使用了这个库。 libESMTP 程序'smtp-tls.c'函数'match_component'存在程序设计漏洞。在对两个字符串进行比较时，如果其中一个字符串是另外一个字符串的子字符串时，程序会认为这两个字符串相等，远程攻击者可以通过特制的subjectAltName欺骗信任证书。
CVSS Information
N/A
Vulnerability Type
N/A