2626 matches found
CVE-2014-2957
The CVE-2014-2957 entry concerns Exim (before 4.82.1). When EXPERIMENTAL_DMARC is enabled, the dmarc_process function in dmarc.c can be triggered via the From header in an email, passing data to expand_string and allowing remote code execution. This is the concrete vulnerability described in mult...
CVE-2014-2957
The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...
CVE-2014-2972
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...
PT-2014-4982
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.82.1 Description The issue allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expand string function. This occurs when the EXPERIMENTAL DMARC feature is enabled...
CVE-2014-2972: Undefined Security Weakness
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...
CVE-2014-2957: Improper Input Validation
The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...
CVE-2014-2972
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...
PT-2014-4994
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.83 Description The issue allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. This is due to the expansion of mathematical comparisons twice in the expand.c file...
UBUNTU-CVE-2014-2972
expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value...
Exim and Dovecot Insecure Configuration 命令执行漏洞
No description provided by source...
Low: exim
Issue Overview: expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value. Affected Packages: exim Issue Correction: Run yum update exim or yum update --advisory ALAS-2014-395 to updat...
openSUSE Security Update : exim (openSUSE-SU-2014:0983-1)
"Changes in exim : - Silence static checkers; beo1506. - update to 4.83 This release of Exim includes one incompatible fix : + the behavior of expansion of arguments to math comparison functions , was unexpected, expanding the values twice; CVE-2014-2972; bnc888520 This release contains the...
Exim < 4.83 Math Comparison Functions Data Insertion
According to its banner, the version of Exim running on the remote host is prior to 4.83. It is, therefore, potentially affected by a data insertion vulnerability. A flaw exists in the expansion of arguments to math comparison functions which can cause values to be expanded twice. This could perm...
Fedora Update for exim FEDORA-2014-8865
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for exim FEDORA-2014-8803
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : exim-4.80.1-7.fc20 (2014-8865)
Security fix for CVE-2014-2972 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
Fedora 19 : exim-4.80.1-4.fc19 (2014-8803)
Security fix for CVE-2014-2972 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...
[SECURITY] Fedora 20 Update: exim-4.80.1-7.fc20
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
[SECURITY] Fedora 19 Update: exim-4.80.1-4.fc19
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Exim Internet Mailer 3.35/3.36/4.10 Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attacker to execute...