Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-6789HistoryFeb 08, 2018 - 11:29 p.m.
CVE-2018-6789
2018-02-0823:29:01
Debian Security Bug Tracker
security-tracker.debian.org
55
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.958
Percentile
99.5%
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | exim4 | <Β 4.90.1-1 | exim4_4.90.1-1_all.deb |
| Debian | 11 | all | exim4 | <Β 4.90.1-1 | exim4_4.90.1-1_all.deb |
| Debian | 999 | all | exim4 | <Β 4.90.1-1 | exim4_4.90.1-1_all.deb |
| Debian | 13 | all | exim4 | <Β 4.90.1-1 | exim4_4.90.1-1_all.deb |
Related
debian
debian
[SECURITY] [DLA 1274-1] exim4 security update
2018-02-10 20:05:53
[SECURITY] [DSA 4110-1] exim4 security update
2018-02-10 18:35:51
[SECURITY] [DSA 4110-1] exim4 security update
2018-02-10 18:35:51
nessus
nessus
Fedora 27 : exim (2018-5aec14e125)
2018-02-27 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : Exim vulnerability (USN-3565-1)
2018-02-13 00:00:00
openSUSE Security Update : exim (openSUSE-2018-170)
2018-02-20 00:00:00
osv
osv
exim4 - security update
2018-02-10 00:00:00
exim4 - security update
2018-02-10 00:00:00
CVE-2018-6789
2018-02-08 23:29:01
exploitdb
exploitdb
exim 4.90 - Remote Code Execution
2018-10-24 00:00:00
Exim < 4.90.1 - 'base64d' Remote Code Execution
2018-05-02 00:00:00
zdt
zdt
Exim < 4.90.1 - base64d Remote Code Execution Exploit
2018-05-02 00:00:00
Exim base64d Buffer Overflow Exploit
2021-06-03 00:00:00
exim 4.90 - Remote Code Execution Exploit
2018-10-24 00:00:00
saint
saint
Exim SMTP listener base64d function one-character buffer overflow
2018-05-16 00:00:00
Exim SMTP listener base64d function one-character buffer overflow
2018-05-16 00:00:00
Exim SMTP listener base64d function one-character buffer overflow
2018-05-16 00:00:00
amazon
amazon
Critical: exim
2018-03-07 21:43:00
openvas
openvas
Fedora Update for exim FEDORA-2018-5aec14e125
2018-02-27 00:00:00
Debian: Security Advisory (DSA-4110-1)
2018-02-09 00:00:00
Debian: Security Advisory (DLA-1274-1)
2018-02-20 00:00:00
canvas
canvas
Immunity Canvas: EXIM_HEAP_OVERFLOW
2018-02-08 23:29:00
exploitpack
exploitpack
exim 4.90 - Remote Code Execution
2018-10-24 00:00:00
Exim 4.90.1 - base64d Remote Code Execution
2018-05-02 00:00:00
prion
prion
Buffer overflow
2018-02-08 23:29:00
suse
suse
Security update for exim (important)
2018-02-19 12:08:51
Security update for exim (critical)
2021-05-07 00:00:00
Security update for exim (critical)
2021-05-20 00:00:00
fedora
fedora
[SECURITY] Fedora 27 Update: exim-4.90.1-2.fc27
2018-02-26 16:54:15
[SECURITY] Fedora 26 Update: exim-4.90.1-2.fc26
2018-02-26 15:45:26
attackerkb
attackerkb
Exim SMTP server RCE via base64d
2018-02-08 00:00:00
CVE-2018-6789
2018-02-08 00:00:00
Exim EHLO crash bug
2019-09-27 00:00:00
cve
cve
CVE-2018-6789
2018-02-08 23:29:01
cvelist
cvelist
CVE-2018-6789
2018-02-08 23:00:00
hackerone
hackerone
Internet Bug Bounty: Exim off-by-one RCE vulnerability
2018-03-06 19:04:40
redhatcve
redhatcve
CVE-2018-6789
2018-02-08 06:19:35
archlinux
archlinux
[ASA-201802-6] exim: arbitrary code execution
2018-02-12 00:00:00
packetstorm
packetstorm
Exim base64d Buffer Overflow
2021-06-03 00:00:00
Exim base64d Remote Code Execution
2018-05-03 00:00:00
Exim 4.90 Remote Code Execution
2018-10-24 00:00:00
ubuntu
ubuntu
Exim vulnerability
2018-02-12 00:00:00
freebsd
freebsd
exim -- a buffer overflow vulnerability, remote code execution
2018-02-05 00:00:00
cisa_kev
cisa_kev
Exim Buffer Overflow Vulnerability
2021-11-03 00:00:00
nvd
nvd
CVE-2018-6789
2018-02-08 23:29:01
alpinelinux
alpinelinux
CVE-2018-6789
2018-02-08 23:29:01
checkpoint_advisories
checkpoint_advisories
Exim Mail Server Buffer Overflow (CVE-2018-6789)
2020-10-21 00:00:00
seebug
seebug
Exim < 4.90.1 - base64d Remote Code ExecutionοΌCVE-2018-6789οΌ
2018-05-04 00:00:00
ubuntucve
ubuntucve
CVE-2018-6789
2018-02-07 00:00:00
myhack58
myhack58
gentoo
gentoo
Exim: Multiple vulnerabilities
2018-03-06 00:00:00
threatpost
threatpost
Bug Parade: NSA Warns on Cresting China-Backed Cyberattacks
2020-10-21 20:31:17
qualysblog
qualysblog
NSA Alert: Chinese State-Sponsored Actors Exploit Known Vulnerabilities
2020-10-22 23:10:29
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
ics
ics
Potential for China Cyber Response to Heightened U.S.βChina Tensions
2020-10-20 12:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.958
Percentile
99.5%
Related for DEBIANCVE:CVE-2018-6789