{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-03-03T00:00:00", "descriptions": [{"lang": "en", "value": "The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2010-04-30T09:00:00", "orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical"}, "references": [{"name": "[oss-security] 20100309 Re: CVE Request: libesmtp does not check NULL bytes in commonName", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2010/03/09/3"}, {"name": "ADV-2010-1107", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/1107"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191"}, {"name": "SUSE-SR:2010:011", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"}, {"name": "[oss-security] 20100303 CVE Request: libesmtp does not check NULL bytes in commonName", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2010/03/03/6"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@ubuntu.com", "ID": "CVE-2010-1194", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "[oss-security] 20100309 Re: CVE Request: libesmtp does not check NULL bytes in commonName", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2010/03/09/3"}, {"name": "ADV-2010-1107", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/1107"}, {"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191", "refsource": "CONFIRM", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191"}, {"name": "SUSE-SR:2010:011", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"}, {"name": "[oss-security] 20100303 CVE Request: libesmtp does not check NULL bytes in commonName", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2010/03/03/6"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T01:14:06.680Z"}, "title": "CVE Program Container", "references": [{"name": "[oss-security] 20100309 Re: CVE Request: libesmtp does not check NULL bytes in commonName", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2010/03/09/3"}, {"name": "ADV-2010-1107", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/1107"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191"}, {"name": "SUSE-SR:2010:011", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"}, {"name": "[oss-security] 20100303 CVE Request: libesmtp does not check NULL bytes in commonName", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2010/03/03/6"}]}]}, "cveMetadata": {"assignerOrgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "assignerShortName": "canonical", "cveId": "CVE-2010-1194", "datePublished": "2010-03-31T17:35:00", "dateReserved": "2010-03-30T00:00:00", "dateUpdated": "2024-08-07T01:14:06.680Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.1:-:*:*:*:*:*:*", "matchCriteriaId": "A016D2D3-EE76-4DE2-A276-173395F6A063", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.1:a:*:*:*:*:*:*", "matchCriteriaId": "AB54FDC2-8A09-41BA-B949-238CA1C2434F", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.2:*:*:*:*:*:*:*", "matchCriteriaId": "0113758D-DB03-4931-BB33-275D6A3125C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.3:*:*:*:*:*:*:*", "matchCriteriaId": "EDC85F8E-4752-4267-9945-E514424A15E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.4:*:*:*:*:*:*:*", "matchCriteriaId": "34F9DE95-01E6-4939-A5D5-723A6C26E8C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.5:*:*:*:*:*:*:*", "matchCriteriaId": "2D8EBBED-D518-4FE6-9722-FE96156ADCBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.6:*:*:*:*:*:*:*", "matchCriteriaId": "8F747504-1B8B-4838-B95B-AD8FCA966A2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.6:a:*:*:*:*:*:*", "matchCriteriaId": "F871ED10-3FCA-4E32-8515-AE2211C958D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.6.1:*:*:*:*:*:*:*", "matchCriteriaId": "3541B6CC-AFA2-4F62-A857-37577573EEB5", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "9021CCAF-5800-4496-A5CE-234A032A2E10", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.7.1:*:*:*:*:*:*:*", "matchCriteriaId": "246D55A7-E0C7-4B0D-B949-DCFF68C0634A", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.0:*:*:*:*:*:*:*", "matchCriteriaId": "9BD3F317-F430-41E6-9082-FE3DFB12EFB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.1:*:*:*:*:*:*:*", "matchCriteriaId": "5218A899-88B9-484A-B6A8-A25960BAA9F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.2:*:*:*:*:*:*:*", "matchCriteriaId": "8EF0F5D8-6991-4FE0-A0A6-D5B52DF3A811", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.3:*:*:*:*:*:*:*", "matchCriteriaId": "4AFB4394-0F64-438E-B75D-F3F52CBF08E5", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.4:*:*:*:*:*:*:*", "matchCriteriaId": "1EE39BF3-425D-4F79-B1E9-01A489C00DE5", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.5:*:*:*:*:*:*:*", "matchCriteriaId": "5A2CCA42-428A-4F9A-B5CB-CB49D593835B", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.6:*:*:*:*:*:*:*", "matchCriteriaId": "D0B443A8-E04F-41C1-A186-2A153BE1C269", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.7:*:*:*:*:*:*:*", "matchCriteriaId": "7C93C845-A736-4FD3-BF88-3B36E2AC2EE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.8:*:*:*:*:*:*:*", "matchCriteriaId": "101A6FAC-8566-4E11-93E9-568DC018894F", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.9:*:*:*:*:*:*:*", "matchCriteriaId": "134AA471-AEB0-403B-8B60-274E09047263", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.10:*:*:*:*:*:*:*", "matchCriteriaId": "C20A0E7C-3036-46F0-9C56-6A5685ED228F", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.10:p1:*:*:*:*:*:*", "matchCriteriaId": "1E1DC40D-B9B5-4BA6-93FA-08AC7019FC62", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.11:*:*:*:*:*:*:*", "matchCriteriaId": "2D0D5BCE-DAA9-4336-8928-6D5C6842190D", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:0.8.12:*:*:*:*:*:*:*", "matchCriteriaId": "0FFF7DED-5D47-4FB2-B0CF-ED63BE816259", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "E80CB462-C4DB-46F8-B925-AF2A6AABEABE", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "2EAF1E2E-9435-465E-B159-22B7CA616730", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "5DB9A308-18D7-4737-9EEF-7827F8A20CB9", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "5C9A1AA9-23FD-49F1-8938-3AA9D3142017", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "51E63477-32B1-498C-8EA8-ADAACBAEB0C3", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.3:r1:*:*:*:*:*:*", "matchCriteriaId": "50F6AC34-17C2-4E4E-964C-3DA9C90858A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:stafford.uklinux:libesmtp:1.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "19CDCC92-8EBC-48E3-B9B1-1CCA01C0E0E7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName."}, {"lang": "es", "value": "La funci\u00f3n match_component en smtp-tls.c en libESMTP 1.0.3.r1, y posiblemente otras versiones, incluyendo la 1.0.4, trata dos cadenas como iguales si una es una subcadena de la otra, lo que permite a atacantes remotos suplantar certificados de confianza mediante un subjectAltName manipulado."}], "id": "CVE-2010-1194", "lastModified": "2010-05-22T05:46:40.157", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-03-31T18:00:00.703", "references": [{"source": "security@ubuntu.com", "tags": ["Patch"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311191"}, {"source": "security@ubuntu.com", "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html"}, {"source": "security@ubuntu.com", "url": "http://www.openwall.com/lists/oss-security/2010/03/03/6"}, {"source": "security@ubuntu.com", "url": "http://www.openwall.com/lists/oss-security/2010/03/09/3"}, {"source": "security@ubuntu.com", "url": "http://www.vupen.com/english/advisories/2010/1107"}], "sourceIdentifier": "security@ubuntu.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-310"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "libESMTP: Multiple certificate validation flaws", "id": "571817", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=571817"}, "csaw": false, "cvss": {"cvss_base_score": "4.3", "cvss_scoring_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "status": "draft"}, "details": ["The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName."], "name": "CVE-2010-1194", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Affected", "package_name": "libesmtp", "product_name": "Red Hat Enterprise Linux 6"}], "public_date": "2010-03-03T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2010-1194\nhttps://nvd.nist.gov/vuln/detail/CVE-2010-1194"], "threat_severity": "Moderate"}