CVE:CVE-2010-1194
CNNVD:CNNVD-201003-523
libesmtp是一款SMTP库，balsa邮件客户端使用了这个库。
libESMTP 程序'smtp-tls.c'函数'match_component'存在程序设计漏洞。在对两个字符串进行比较时，如果其中一个字符串是另外一个字符串的子字符串时，程序会认为这两个字符串相等，远程攻击者可以通过特制的subjectAltName欺骗信任证书。
solution:Upgrade stafford.uklinux libesmtp to a higher version than 0.1,0.1:a,0.2,0.3,0.4,0.5,0.6,0.6:a,0.6.1,0.7.0,0.7.1,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.10:p1,0.8.11,0.8.12,1.0,1.0:rc1,1.0.1,1.0.2,1.0.3,1.0.3:r1,1.0.4,and avoid the version 0.1,0.1:a,0.2,0.3,0.4,0.5,0.6,0.6:a,0.6.1,0.7.0,0.7.1,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.10:p1,0.8.11,0.8.12,1.0,1.0:rc1,1.0.1,1.0.2,1.0.3,1.0.3:r1,1.0.4