exim -- two buffer overflow vulnerabilities

2005-01-0500:00:00

vuxml.freebsd.org

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.8%

JSON

The function host_aton() can overflow a buffer
if it is presented with an illegal IPv6 address
that has more than 8 components.
The second report described a buffer overflow
in the function spa_base64_to_bits(), which is part
of the code for SPA authentication.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchexim< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-ldap< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-ldap2< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-mysql< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-postgresql< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-sa-exim< 4.43+28_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	exim	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-ldap	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-ldap2	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-mysql	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-postgresql	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-sa-exim	< 4.43+28_1	UNKNOWN