Cannot specify server certificate hostname verification whitelist
Bug #1384232 reported by
Roca
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
exim4 (Ubuntu) |
Triaged
|
Undecided
|
Unassigned |
Bug Description
We did a automatic static analysis on exim4 packages in Ubuntu and found that EXIM will not verify the hostname of a SMTP server against its certificate. This will possibly result in man-in-the-middle attack. We reported this bug directly to exim.org in May 2014 and they fixed this problem in their latest release. So plz fix this issue in Ubuntu.
Bug: http://
Fix: http://
Changed in exim4 (Ubuntu): | |
status: | New → Confirmed |
To post a comment you must log in.
Do you know if a CVE has been assigned for this issue?
Thanks