FreeBSD Ports: exim

The remote host is missing an update to the system as announced in the referenced advisory. VID e4fcf020-0447-11e0-becc-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID e4fcf020-0447-11e0-becc-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

RedHat Update for exim RHSA-2011:0153-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for exim RHSA-2011:0153-01

Check for the Version of exim OpenVAS Vulnerability Test RedHat Update for exim RHSA-2011:0153-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RHEL 4 / 5 : exim (RHSA-2011:0153)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0153 advisory. Exim is a mail transport agent MTA developed at the University of Cambridge for use on UNIX systems connected to the Internet. A privilege...

Moderate: Red Hat Security Advisory: exim security update

Updated exim packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

exim: privilege escalation

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spooldirectory directive...

exim security update

4.63-5.el56.2 - fix privilege escalation CVE-2010-4345, 662012...

FreeBSD : exim -- local privilege escalation (e4fcf020-0447-11e0-becc-0022156e8794)

David Woodhouse reports : Secondly a privilege escalation where the trusted 'exim' user is able to tell Exim to use arbitrary config files, in which further $run ... commands will be invoked as root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

SuSE Update for exim SUSE-SA:2010:059

Check for the Version of exim OpenVAS Vulnerability Test SuSE Update for exim SUSE-SA:2010:059 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

SUSE: Security Advisory for exim (SUSE-SA:2010:059)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for exim RHSA-2010:0970-01

Check for the Version of exim OpenVAS Vulnerability Test RedHat Update for exim RHSA-2010:0970-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Ubuntu Update for exim4 vulnerability USN-1032-1

Ubuntu Update for Linux kernel vulnerabilities USN-1032-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10321.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for exim4 vulnerability USN-1032-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

RedHat Update for exim RHSA-2010:0970-01

Check for the Version of exim OpenVAS Vulnerability Test RedHat Update for exim RHSA-2010:0970-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Exim MTA string_format Remote Code Execution (CVE-2010-4344)

The Exim mail server is a full featured mail transfer agent MTA used in Unix-like platforms. It contains implementations of SMTP server for incoming messages as well ,as a SMTP or LMTP client for incoming email. A heap buffer overflow vulnerability has been reported in Exim Mail Transfer Agent MT...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

Rootkit Being Used in Attacks on Exim Bug

Attackers have begun using the bug in the Exim mailer that was disclosed earlier this week to install a rootkit on machines running vulnerable versions of the software. The vulnerability in Exim, which is a mail transfer agent used on Unix-based machines, came to light on Monday and can result in...

Exim string_format Function Remote Overflow

A heap overflow vulnerability exists in the version of exim installed on the remote host. By sending a specially crafted message to the server, a remote attacker can leverage this vulnerability to execute arbitrary code on the server with the privilege of the exim server. A separate vulnerability...

Exim < 4.70 string_format Function Remote Overflow

Binary data 5910.prm...

CVE-2010-4345

Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spooldirectory directive...

CVE-2010-4344

Heap-based buffer overflow in the stringvformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging...