2215 matches found
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
This week, MSRC confirmed the presence of an active Linux worm leveraging a critical Remote Code Execution RCE vulnerability, CVE-2019-10149, in Linux Exim email servers running Exim version 4.87 to 4.91. Microsoft Azure infrastructure and Services are not affected; only customer’s Linux IaaS...
Prevent the impact of a Linux worm by updating Exim (CVE-2019-10149)
This week, MSRC confirmed the presence of an active Linux worm leveraging a critical Remote Code Execution RCE vulnerability, CVE-2019-10149, in Linux Exim email servers running Exim version 4.87 to 4.91. Microsoft Azure infrastructure and Services are not affected; only customer’s Linux IaaS...
CVE-2019-10149: the Exim remote command execution vulnerability and early warning analysis-vulnerability warning-the black bar safety net
Recently, security researchers found the Exim mail server there is a remote command execution vulnerability, the vulnerability number CVE-2019-10149 it. The vulnerability in the default configuration may be a local attacker to direct the use, by low-privileged user to execute root command, a remo...
Exim Releases Security Patches
Exim has released patches to address a vulnerability affecting Exim versions 4.87–4.91. A remote attacker could exploit this vulnerability to take control of an affected email server. This vulnerability was detected in exploits in the wild. The Cybersecurity and Infrastructure Security Agency CIS...
Exploit for OS Command Injection in Exim
eximrce Simple python socket connection to test if exim is vu...
Exim Mail Server Remote Code Execution (CVE-2019-10149)
A remote code execution vulnerability exists in Exim Mail Server. A remote attacker can exploit this issue by sending a specially crafted packet to the target server. Successful exploitation could result in execution of arbitrary code on the affected system...
openSUSE Security Update : exim (openSUSE-2019-1524)
exim was updated to fix a security issue. - CVE-2019-10149: Fixed a Remote Command Execution in exim bsc1136587 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2019-1524. The text description of this...
openSUSE: Security Advisory for Security (openSUSE-SU-2019:1524-1)
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2019:1524-1 Security update exim
exim was updated to fix a security issue. - CVE-2019-10149: Fixed a Remote Command Execution in exim bsc1136587...
Ubuntu 18.04 LTS : Exim vulnerability (USN-4010-1)
The remote Ubuntu 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4010-1 advisory. It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands. Tenabl...
GLSA-201906-01 : Exim: Remote command execution
The remote host is affected by the vulnerability described in GLSA-201906-01 Exim: Remote command execution A vulnerability was discovered in how Exim validates recipient addresses in the delivermessage function. Impact : A remote attacker could execute arbitrary commands by sending an email with...
FreeBSD : Exim -- RCE in deliver_message() function (45bea6b5-8855-11e9-8d41-97657151f8c2)
Exim team and Qualys report : We received a report of a possible remote exploit. Currently there is no evidence of an active use of this exploit. A patch exists already, is being tested, and backported to all versions we released since and including 4.87. The severity depends on your configuratio...
Amazon Linux AMI : exim (ALAS-2019-1221)
A flaw was found in Exim versions 4.87 to 4.91 before release 1.20 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution. CVE-2019-10149 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Exim 4.87 < 4.91 - (Local / Remote) Command Execution Exploit
Qualys Security Advisory The Return of the WIZard: RCE in Exim CVE-2019-10149 ======================================================================== Contents ======================================================================== Summary Local exploitation Remote exploitation - Non-default...
Exim 4.87 - 4.91 RCE Vulnerability
Exim is prone to an unauthenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Security update exim (important)
openSUSE Security Update: Security update exim Announcement ID: openSUSE-SU-2019:1524-1 Rating: important References: 1136587 Cross-References: CVE-2019-10149 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: exim was...
Exim < 4.92 RCE
Binary data 700728.prm...
Exim 4.87 < 4.92 Remote Command Execution
According to its banner, the version of Exim running on the remote host is between 4.87 and 4.91 inclusive. It is, therefore, potentially affected by a remote command execution vulnerability. A flaw exists in the delivermessage function that could allow an attacker to execute arbitrary commands v...
Exim: Remote command execution
Background Exim is a message transfer agent MTA designed to be a a highly configurable, drop-in replacement for sendmail. Description A vulnerability was discovered in how Exim validates recipient addresses in the delivermessage function. Impact A remote attacker could execute arbitrary commands ...
