CVE:CVE-2010-1192
CNNVD:CNNVD-201003-522
libesmtp是一款SMTP库，balsa邮件客户端使用了这个库。
libESMTP中的证书处理存在中间人攻击漏洞。libESMTP没有正确处理X.509证书的主题的通用名称（CN）中域名中的“\0”字符，远程中间人攻击者可以通过特制的合法CA颁发的证书进行中间人攻击，欺骗任意SSL服务器。
solution:Upgrade stafford.uklinux libesmtp to a higher version than 1.0.4,0.1,0.1:a,0.2,0.3,0.4,0.5,0.6,0.6:a,0.6.1,0.7.0,0.7.1,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.10:p1,0.8.11,0.8.12,1.0,1.0:rc1,1.0.1,1.0.2,1.0.3,and avoid the version (,1.0.4],0.1,0.1:a,0.2,0.3,0.4,0.5,0.6,0.6:a,0.6.1,0.7.0,0.7.1,0.8.0,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.10:p1,0.8.11,0.8.12,1.0,1.0:rc1,1.0.1,1.0.2,1.0.3