Re: [exim] Closing off Port to non-SSL traffic

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Jeremy Harris
Ημερομηνία:  
Προς: exim-users
Αντικείμενο: Re: [exim] Closing off Port to non-SSL traffic
On 26/06/2022 08:19, Andrew C Aitchison via Exim-users wrote:
> [ I should document CVE-2021-38371:
>  before exim 4.95 exim probably was exposed to a man-in-the
>  middle attack on STARTTLS when *sending* email, though it
>  it is not clear how it could have been exploited.


Indeed, nobody that I am aware of has *ever* demonstrated
a way of exploiting SMTP response injection.
--
Cheers,
Jeremy