Fedora 26 : exim (2018-25a7ba3cb6)

This is an update fixing mysql module. ---- This is new version fixing CVE-2018-6789. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 27 : exim (2018-5aec14e125)

This is an update fixing mysql module. ---- This is new version fixing CVE-2018-6789. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

openSUSE Security Update : exim (openSUSE-2018-170)

This update for exim fixes the following issues : - CVE-2018-6789: Fixed a buffer overflow in the base64decode function, which could be used to execute code remotely. boo1079832 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE: Security Advisory for exim (openSUSE-SU-2018:0468-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for exim (important)

This update for exim fixes the following issues: - CVE-2018-6789: Fixed a buffer overflow in the base64decode function, which could be used to execute code remotely. boo1079832...

Ubuntu: Security Advisory (USN-3565-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-201802-6] exim: arbitrary code execution

Arch Linux Security Advisory ASA-201802-6 ========================================= Severity: High Date : 2018-02-12 CVE-ID : CVE-2018-6789 Package : exim Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-608 Summary ======= The package exim before version...

Debian DSA-4110-1 : exim4 - security update

Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted message. C Tenable...

FreeBSD : exim -- a buffer overflow vulnerability, remote code execution (316b3c3e-0e98-11e8-8d41-97657151f8c2)

Exim developers report : There is a buffer overflow in base64d, if some pre-conditions are met. Using a handcrafted message, remote code execution seems to be possible. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML...

[SECURITY] [DLA 1274-1] exim4 security update

Package : exim4 Version : 4.80-7+deb7u6 CVE ID : CVE-2018-6789 Debian Bug : 890000 Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or...

[SECURITY] [DSA 4110-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4110-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 10, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4110-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4110-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 10, 2018 https://www.debian.org/security/faq -...

CVE-2018-6789

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...

Immunity Canvas: EXIM_HEAP_OVERFLOW

Name| eximheapoverflow ---|--- CVE| CVE-2018-6789 Exploit Pack| CANVAS Description| eximheapoverflow Notes| CVE Name: CVE-2018-6789 VENDOR: Exim NOTES: There is a buffer overflow in the b64decode function, this bug exists since the first commit of exim, hence ALL versions are affected. This explo...

CVE-2018-6789

CVE-2018-6789 is an Exim SMTP base64d buffer overflow vulnerability. The issue resides in the base64d function of Exim’s SMTP listener prior to version 4.90.1, where a handcrafted EHLO/message can cause a heap/buffer overflow and enable remote code execution. Multiple sources confirm the vulnerab...

CVE-2018-6789

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...

CVE-2018-6789

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely. Recent assessments: gwillcox-r7 at October 20, 2020 6:46pm UTC reported: This is now supposedly...

CVE-2018-6789

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...

CVE-2017-6789

CVE-2017-6789 affects Cisco Unified Intelligence Center (CUIC). The vulnerability is a DOM-based, environment or client-side XSS resulting from unvalidated user-supplied data in the DOM input, exploitable by sending crafted URLs to the affected system. A successful exploit could allow an unauthen...

CVE-2016-6789

An elevation of privilege vulnerability in the NVIDIA libomx library libnvomx could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which...