oss-sec mailing list archives

Re: Re: New SMTP smuggling attack


From: Valtteri Vuorikoski <vuori () notcom org>
Date: Sat, 23 Dec 2023 14:29:34 +0200

On Fri, Dec 22, 2023 at 11:46:48AM +0100, Marcus Meissner wrote:
Hi,

FWIW as no CVEs were to be found yet, I filed a CVE request for Postfix now.

Not sure if we need it for others like sendmail too, as that is also
referenced by the security researchers.

Looks like exim opened a bug on this yesterday too, no sign of CVE yet:
<https://bugs.exim.org/show_bug.cgi?id=3063>

 -Valtteri


Current thread: