FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

sieve-connect -- TLS hostname verification was not occurring

Affected packages
sieve-connect < 0.85

Details

VuXML ID a2ff483f-a5c6-11e2-9601-000d601460a4
Discovery 2013-04-14
Entry 2013-04-15

sieve-connect developer Phil Pennock reports:

sieve-connect was not actually verifying TLS certificate identities matched the expected hostname.

[source]

References

URL http://mail.globnix.net/pipermail/sieve-connect-announce/2013/000005.html

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.