oss-sec mailing list archives

Re: Re: New SMTP smuggling attack

From: Rodrigo Freire <rfreire () redhat com>
Date: Fri, 22 Dec 2023 12:47:44 -0300

On Fri, Dec 22, 2023 at 12:10 PM Erik Auerswald
<auerswal () unix-ag uni-kl de> wrote:

  * The CERT/CC and VINCE involvement resulted in "there is no
    vulnerability".


I'm trying to make sense of it - where's the compromise of the
Confidentiality, Integrity or Availability of the affected mail
servers?

Current thread:

New SMTP smuggling attack Marcus Meissner (Dec 21)
- Re: New SMTP smuggling attack Claus Assmann (Dec 21)
  - Re: Re: New SMTP smuggling attack Marcus Meissner (Dec 22)
    - Re: Re: New SMTP smuggling attack Stuart Henderson (Dec 22)
    - Re: Re: New SMTP smuggling attack Marcus Meissner (Dec 22)
    - Re: Re: New SMTP smuggling attack Erik Auerswald (Dec 22)
    - Re: Re: New SMTP smuggling attack Rodrigo Freire (Dec 22)
    - Re: Re: New SMTP smuggling attack Alexander E. Patrakov (Dec 22)
    - Re: Re: New SMTP smuggling attack Erik Auerswald (Dec 22)
    - Re: Re: New SMTP smuggling attack Stuart D Gathman (Dec 22)
    - Re: Re: New SMTP smuggling attack Harry Sintonen (Dec 22)
    - Re: Re: New SMTP smuggling attack Bjoern Franke (Dec 22)
    - Re: Re: New SMTP smuggling attack Valtteri Vuorikoski (Dec 23)
    - Re: Re: New SMTP smuggling attack Marcus Meissner (Dec 24)
    - Re: Re: New SMTP smuggling attack kai (Dec 25)
    - Re: New SMTP smuggling attack Claus Assmann (Dec 26)
    - Re: Re: New SMTP smuggling attack Alan Coopersmith (Dec 29)

(Thread continues...)