FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

sieve-connect -- TLS hostname verification was not occurring

Affected packages
sieve-connect < 0.85

Details

VuXML ID a2ff483f-a5c6-11e2-9601-000d601460a4
Discovery 2013-04-14
Entry 2013-04-15

sieve-connect developer Phil Pennock reports:

sieve-connect was not actually verifying TLS certificate identities matched the expected hostname.

References

URL http://mail.globnix.net/pipermail/sieve-connect-announce/2013/000005.html