HMailServer (6.3.4 Through 6.3.7)

A vulnerability in Progressive Robot hMailServer 6.3.4 through 6.3.7 allows a local attacker to perform a man-in-the-middle attack on database connections when configured with TlsMode=verify-full and no TlsCaFile.

Progressive Robot hMailServer 6.3.4 through 6.3.7, when using a MySQL or MariaDB database with TlsMode=verify-full, fails to provide the configured CA file to the database client if the filename contains specific non-ASCII or high-Unicode characters. This results in the database client performing certificate verification without the intended CA, potentially allowing an attacker who intercepts the connection to read or modify traffic.