[SECURITY] [DSA-376-2] New exim packages fix incorrect permissions on documentation

-------------------------------------------------------------------------- Debian Security Advisory DSA 376-2 [email protected] http://www.debian.org/security/ Matt Zimmerman September 7th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0743

CVE-2003-0743 affects Exim 3 (before 3.36) and Exim 4 (before 4.21); a heap-based buffer overflow in smtp_in.c triggered by long, space-filled HELO/EHLO arguments followed by a NULL and newline could let remote attackers execute code. Debian advisory DSA-376 notes the remediation: updates to exim...

CVE-2003-0743

Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...

[SECURITY] [DSA-376-1] New exim, exim-tls packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 376-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 4th, 2003 http://www.debian.org/security/faq -...

DSA-376 exim - buffer overflow

Bulletin has no description...

exim buffer overflow

Buffer overflow with static string can be exploited as off-by-one...

exim remote heap overflow, probably not exploitable

Exim www.exim.org is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. There's a heap overflow in all versions of exim3 and exim4 prior to version 4.21. It can be exercised by anyone who can make an SMTP connection to the exim...

Exim < 4.22 smtp_in.c HELO/EHLO Remote Overflow

According to its banner, the version of Exim running on the remote host has a remote heap-based buffer overflow vulnerability. A remote, unauthenticated attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CVE-2002-0274

CVE-2002-0274 : Affects Exim 3.34 and earlier. The vulnerability is a buffer overflow in the long -C (configuration file) and other command line arguments, enabling a local user to gain privileges. Root cause: improper handling of lengthy inputs in configuration/command line parsing leading to me...

CVE-2002-0274

Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C configuration file and other command line arguments...

SpamAssassin / spamc+BSMTP remote buffer overflow

Well, I was going to wait until 2.50 release, but it seems to be taking and this likely affects only few installations. Besides, it's been in their public bugzilla for over a month. So: Attacker may be able to execute arbitrary code by sending a specially crafted e-mail to a system using...

DEBIAN-CVE-2002-1381

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...

CVE-2002-1381

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...

CVE-2002-1381

Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...

Exim Internet Mailer 3.353.364.10 - Format String

Exim Internet Mailer 3.353.364.10 - Format String // source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attack...

Exim Internet Mailer 3.35/3.36/4.10 - Format String

// source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attacker to execute arbitrary code with root privileges...

Exim does not adequately validate user input thereby allow execution of arbitrary commands

Overview Under certain configurations, Exim may execute commands embedded in a mail message's From address. Description Exim is an open-source mail transport agent distributed by the University of Cambridge. Exim can be configured to route all incoming mail or mail to particular addresses through...

CVE-2001-0889

Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters...

CVE-2001-0889

Exim vulnerable to remote command execution when redirecting to a pipe: Exim 3.22 and earlier fail to properly verify the local part of the address, allowing shell metacharacters to run arbitrary commands. Public details from CVE-2001-0889 describe impact as remote command execution with the Exim...

CVE-2002-0274

Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C configuration file and other command line arguments...