Threats tagged 'ghsa-7748-8wp3-j5hq'

Progressive Robot hMailServer versions 6.3.4 through 6.3.7, when configured with a MySQL or MariaDB database and TlsMode=verify-full, improperly handle the CA file if its filename contains non-ASCII characters on Linux or characters above U+00FF on Windows. This causes the database client not to use the specified CA file for TLS verification, allowing an attacker who can intercept the database connection to read and modify traffic by presenting a certificate that bypasses proper validation. The vulnerability arises from the server converting the CA filename to an empty string under certain locale settings, resulting in no CA file being set without error, while certificate verification remains enabled. This issue is compounded by flaws in MariaDB Connector/C versions 3.4.2 to 3.4.10, which can accept unauthorized certificates under these conditions. The default hMailServer configuration is not affected as TlsMode defaults to prefer, which does not enforce certificate checks.