libESMTP X.509 Certificate 'match_component()' Domain Validation Security Bypass Vulnerability

Bugtraq ID:	38538
Class:	Design Error
CVE:	CVE-2010-1194
Remote:	Yes
Local:	No
Published:	May 29 2005 12:00AM
Updated:	Oct 04 2010 07:50PM
Credit:	Martin Lambers
Vulnerable:	S.u.S.E. SUSE Linux Enterprise 11 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 MandrakeSoft Linux Mandrake 2010.1 x86_64 MandrakeSoft Linux Mandrake 2010.1 MandrakeSoft Linux Mandrake 2010.0 x86_64 MandrakeSoft Linux Mandrake 2010.0 MandrakeSoft Linux Mandrake 2009.1 x86_64 MandrakeSoft Linux Mandrake 2009.1 MandrakeSoft Linux Mandrake 2009.0 x86_64 MandrakeSoft Linux Mandrake 2009.0 MandrakeSoft Linux Mandrake 2008.0 x86_64 MandrakeSoft Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 libesmtp libesmtp 1.0.3
Not Vulnerable:

libESMTP X.509 Certificate 'match_component()' Domain Validation Security Bypass Vulnerability

libESMTP is prone to a security-bypass vulnerability.

Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.

libESMTP 1.0.3 is vulnerable; other versions may also be affected.

libESMTP X.509 Certificate 'match_component()' Domain Validation Security Bypass Vulnerability

Attackers use man-in-the-middle attacks to exploit this issue.

libESMTP X.509 Certificate 'match_component()' Domain Validation Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.


MandrakeSoft Linux Mandrake 2010.0 x86_64

• Mandriva lib64esmtp-devel-1.0.4-6.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp5-1.0.4-6.1mdv2010.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.1 x86_64

• Mandriva lib64esmtp-devel-1.0.4-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp5-1.0.4-5.1mdv2009.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.1

• Mandriva libesmtp5-1.0.4-8.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp-devel-1.0.4-8.1mdv2010.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.0

• Mandriva libesmtp-devel-1.0.4-4.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp5-1.0.4-4.1mdv2009.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva lib64esmtp-devel-1.0.4-4.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp5-1.0.4-4.1mdvmes5.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0

• Mandriva libesmtp5-1.0.4-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp5-devel-1.0.4-0.1.20060mlcs4.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.0 x86_64

• Mandriva lib64esmtp5-1.0.4-4.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp-devel-1.0.4-4.1mdv2009.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2008.0 x86_64

• Mandriva lib64esmtp5-1.0.4-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp5-devel-1.0.4-1.1mdv2008.0.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Enterprise Server 5

• Mandriva libesmtp-devel-1.0.4-4.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp5-1.0.4-4.1mdvmes5.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2008.0

• Mandriva libesmtp5-1.0.4-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp5-devel-1.0.4-1.1mdv2008.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.1 x86_64

• Mandriva lib64esmtp5-1.0.4-8.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp-devel-1.0.4-8.1mdv2010.1.x86_64.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2009.1

• Mandriva libesmtp-devel-1.0.4-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp5-1.0.4-5.1mdv2009.1.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Linux Mandrake 2010.0

• Mandriva libesmtp-devel-1.0.4-6.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/


• Mandriva libesmtp5-1.0.4-6.1mdv2010.0.i586.rpm
  http://www.mandriva.com/en/download/

MandrakeSoft Corporate Server 4.0 x86_64

• Mandriva lib64esmtp5-1.0.4-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/


• Mandriva lib64esmtp5-devel-1.0.4-0.1.20060mlcs4.x86_64.rpm
  http://www.mandriva.com/en/download/

libESMTP X.509 Certificate 'match_component()' Domain Validation Security Bypass Vulnerability

References:

• #311191 - libesmtp5: Flaw in TLS certificate hostname matching code (Martin Lambers)
  
• libESMTP Homepage (libESMTP)