Lettre
Monthly
TLS hostname verification bypass in the lettre Rust mailer library (0.10.1 through 0.11.21) exposes users of the boring-tls feature to man-in-the-middle attacks; an inverted boolean caused the default strict configuration to silently disable hostname checking. An on-path attacker holding any chain-valid certificate for any domain can transparently intercept SMTP submission, harvesting PLAIN/LOGIN credentials and full message contents. There is no public exploit identified at time of analysis, but the one-line root cause is visible in the public fix commit, making the flaw trivially understandable; native-tls and rustls backends are not affected.
An issue was discovered in the lettre crate before 0.9.6 for Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
TLS hostname verification bypass in the lettre Rust mailer library (0.10.1 through 0.11.21) exposes users of the boring-tls feature to man-in-the-middle attacks; an inverted boolean caused the default strict configuration to silently disable hostname checking. An on-path attacker holding any chain-valid certificate for any domain can transparently intercept SMTP submission, harvesting PLAIN/LOGIN credentials and full message contents. There is no public exploit identified at time of analysis, but the one-line root cause is visible in the public fix commit, making the flaw trivially understandable; native-tls and rustls backends are not affected.
An issue was discovered in the lettre crate before 0.9.6 for Rust. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.