oss-sec mailing list archives

Re: CVE requests: Critical vulnerabilities in OpenSMTPD

From: "Jason A. Donenfeld" <Jason () zx2c4 com>
Date: Fri, 2 Oct 2015 15:29:31 +0200

I haven't looked at these commits yet but:

If a local user sends a message to a remote address, does this
outgoing connection open up this remote vulnerability vector?

Jason

Current thread:

CVE requests: Critical vulnerabilities in OpenSMTPD Jason A. Donenfeld (Oct 02)
- Re: CVE requests: Critical vulnerabilities in OpenSMTPD Arrigo Triulzi (Oct 02)
  - Re: CVE requests: Critical vulnerabilities in OpenSMTPD Jason A. Donenfeld (Oct 02)
    - Re: CVE requests: Critical vulnerabilities in OpenSMTPD Gilles Chehade (Oct 02)
- Re: CVE requests: Critical vulnerabilities in OpenSMTPD Gilles Chehade (Oct 02)