Exim <= 4.41 dns_build_reverse Local Exploit PoC

No description provided by source. / This proof-of-concept demonstrates the existence of the vulnerability reported by iDEFENSE iDEFENSE Security Advisory 01.14.05. It has been tested against exim-4.41 under Debian GNU/Linux. Note that setuid is not included in the shellcode to avoid...

[SECURITY] [DSA 637-1] New exim-tls packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 637-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 637-1] New exim-tls packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 637-1 [email protected] http://www.debian.org/security/ Martin Schulze January 13th, 2005 http://www.debian.org/security/faq -...

Debian DSA-637-1 : exim-tls - buffer overflow

Philip Hazel announced a buffer overflow in the hostaton function in exim-tls, the SSL-enabled version of the default mail-transport-agent in Debian, which can lead to the execution of arbitrary code via an illegal IPv6 address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

DSA-637-1 exim-tls - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 635-1] New exim packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 635-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 635-1] New exim packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 635-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...

DSA-635-1 exim - buffer overflow

Bulletin has no description...

Debian DSA-635-1 : exim - buffer overflow

Philip Hazel announced a buffer overflow in the hostaton function in exim, the default mail-transport-agent in Debian, which can lead to the execution of arbitrary code via an illegal IPv6 address. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in thi...

iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability

Exim hostaton Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0725 http://www.idefense.com/application/poi/display?type=vulnerabilities January 07, 2005 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...

iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability

Exim authspaserver Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0731 www.idefense.com/application/poi/display?id=178&type=vulnerabilities January 07, 2004 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...

USN-56-1: exim4 vulnerabilities

A flaw has been found in the hostaton function, which can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. When supplying certain command line parameters, the input was not checked, so that a local attacker could possibly exploit the buffer overfl...

Fedora Core 2 : exim-4.43-1.FC2.1 (2005-001)

This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function hostaton can overflow a buffer...

Exim < 4.44 Multiple Overflows

The remote host is running Exim, a message transfer agent SMTP. It is reported that Exim is prone to an IPv6 Address and an SPA authentication buffer overflow. An attacker, exploiting this issue, may be able to execute arbitrary code on the remote host. Exim must be configured with SPA...

[SA13713] Exim IPv6 Handling and SPA Authentication Vulnerabilities

TITLE: Exim IPv6 Handling and SPA Authentication Vulnerabilities SECUNIA ADVISORY ID: SA13713 VERIFY ADVISORY: http://secunia.com/advisories/13713/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Exim 4.x http://secunia.com/product/841/...

CVE-2005-0021

CVE-2005-0021 affects Exim before 4.43 and allows local code execution through two buffer overflow paths: (1) host_aton() overflow when given an illegal IPv6 address with more than 8 components (triggered via -be or dnsdb PTR lookup), and (2) dns_build_reverse() overflow (triggered by -bh or DNS ...

CVE-2005-0022

Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...

CVE-2005-0021

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...

CVE-2005-0022

Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...

CVE-2005-0022

CVE-2005-0022 affects Exim prior to 4.43. A buffer overflow in the SPA authentication path, via the function spa_base64_to_bits (base64 decoding), arises from insufficient input validation and can let an attacker execute arbitrary code during SPA authentication. Multiple connected advisories refe...