Exim 缓冲区错误漏洞

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A heap buffer overflow vulnerability exists in Exim in parsefixphrase, which stems from interpreting negative sizes in strncpy, and can be exploited by an attacker to elevate...

PT-2021-3128

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to an out-of-bounds write in the main function of Exim, which can occur when the function, running with setuid root privileges, copies the current working directory pathname into a...

Exim 安全漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in exim4 Debian package that stems from insufficient validation of user-supplied input in the spoolreadheader function. The following products and versions a...

Exim 输入验证错误漏洞

Exim is an open source messaging agent MTA that runs on Unix systems and is responsible for routing, forwarding, and delivering mail. Exim suffers from an input validation error vulnerability that stems from an integer overflow within the receive add recipient function...

Exim 缓冲区错误漏洞

Opera Software Opera is a Norwegian web browser from Opera Software that supports multi-window browsing, customizable user interfaces, etc. Exim is an open source messaging agent MTA that runs on Unix systems and is responsible for routing, forwarding, and delivering mail. Exim suffers from a...

Exim: Multiple vulnerabilities

Background Exim is a message transfer agent MTA designed to be a a highly configurable, drop-in replacement for sendmail. Description Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by connecting to t...

PT-2021-3127

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to errors in privilege management. It allows an attacker to delete arbitrary files in the system by leveraging a delete pid file race condition. This can be done using the -oP and...

Exim 缓冲区错误漏洞

Exim is an open source messaging agent MTA that runs on Unix systems and is responsible for routing, forwarding and delivering mail. Exim suffers from a buffer error vulnerability that stems from an integer underflow in the smtp ungetc function. An attacker could exploit this vulnerability to...

Exim 资源管理错误漏洞

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A post-release reuse vulnerability in smtpreset in Exim when providing TLS encryption over OpenSSL can be exploited by an attacker to achieve remote code execution...

Ubuntu 18.04 LTS / 20.04 LTS : Exim vulnerabilities (USN-4934-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4934-1 advisory. It was discovered that Exim contained multiple security issues. An attacker could use these issues to cause a denial of service, execute...

Exim 权限许可和访问控制问题漏洞

Exim is an open source messaging agent MTA that runs on Unix systems and is responsible for routing, forwarding and delivering mail. Exim suffers from a privilege-permission and access-control issue vulnerability that stems from an insecure way in which the application uses a PID file. A local us...

Exim 缓冲区错误漏洞

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. An out-of-bounds read vulnerability exists in smtpsetupmsg in Exim, which can be exploited by an attacker to obtain sensitive information from process memory via an SMTP client...

Vulnerabilities fixed in Exim

Vulnerabilities have been fixed in Exim. Collectively, these vulnerabilities named "21nails." The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution Administrator/Root rights Remote code executio...

Exim 权限许可和访问控制问题漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a privilege-granting and access-control issue vulnerability that stems from the application not properly applying security restrictions to a fake offline directory. An...

Exim 安全漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a security signature issue vulnerability that stems from the lack of a closed execution flag for privileged pipelines. No detailed vulnerability details are provided at th...

Exim 输入验证错误漏洞

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. An integer overflow vulnerability exists in getstdinput in Exim. No detailed vulnerability details are provided at this time...

Out-of-Bounds Read

Exim is vulnerable to out of bound read. The vulnerability exists due to the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c...

Fedora 33 : exim (2021-5697574fd1)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-5697574fd1 advisory. - Fixed cname handling in TLS certificate verification FEDORA-2021-5697574fd1 Note that Nessus has not tested for this issue but has instead relied only on t...

Fedora 32 : exim (2021-89cb264e4d)

The remote Fedora 32 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-89cb264e4d advisory. - Fixed cname handling in TLS certificate verification FEDORA-2021-89cb264e4d Note that Nessus has not tested for this issue but has instead relied only on t...

Fedora: Security Advisory for exim (FEDORA-2021-5697574fd1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...