[exim-dev] [Bug 1479] hostname check missing when verifying …

Top Page
Delete this message
Reply to this message
Author: Roca
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1479] hostname check missing when verifying X509 certificate
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1479

Roca <heboyuan@???> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |heboyuan@???





--- Comment #1 from Roca <heboyuan@???> 2014-05-12 09:42:05 ---
Here is a attack to this kind of vulerability:
http://tersesystems.com/2014/03/23/fixing-hostname-verification/


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email