FreeTDS Development Group

[Frediano Ziglio <freddy77 AT gmail.com>]

2014-10-23 15:14 GMT+01:00 润青杨 <rainkin1993 AT gmail.com>:
> Hi guys,
> Recently, our group are trying to find ssl security problems by static
> anlysis. Now we have find some problems in freetds-bin and report this bugs
> to the launchpad, but we haven't receive any responses.
> Could you please take a look at this bug:
> https://bugs.launchpad.net/ubuntu/+source/freetds/+bug/1376592
> Thanks,
> Rainkin


Thank you,
  I think you are right.

However there is mainly a problem in the default configuration. By
default when you install a server it use quite silently a self-signed.
This means mainly that a man in the middle is just behind the door.

Frediano