Get the latest tech news
16 years of CVE-2008-0166 – Debian OpenSSL Bug
Many DKIM setups used cryptographic keys vulnerable to the 2008 Debian OpenSSL Bug (CVE-2008-0166) in 2024.
DKIM is a mechanism that allows sending mail servers to sign emails with a cryptographic key published via a DNS TXT record. By scanning DKIM keys with my tool badkeys, I discovered a surprisingly large number of hosts vulnerable to the 2008 Debian OpenSSL bug. In some cases, I only controlled the DKIM key of a subdomain, but even then, the BIMI logo configured for the main domain is shown automatically.
Or read this on Hacker News
