Heap overflow

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

CVE-2012-5671

CVE-2012-5671 describes a heap-based buffer overflow in Exim (DKIM DKIM handling) triggered by the function dkim_exim_query_dns_txt in dkim.c , affecting Exim versions 4.70–4.80 when DKIM is enabled and certain ACLs are not configured to disable verification. This allows remote attackers to execu...

CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

[SECURITY] Fedora 16 Update: exim-4.76-4.fc16.2

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Fedora 16 : exim-4.76-4.fc16.2 (2012-17085)

This update protect DKIM DNS decoding from remote exploit, CVE-2012-5671. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

[SECURITY] Fedora 17 Update: exim-4.76-9.fc17

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Fedora 17 : exim-4.76-9.fc17 (2012-17044)

This update protect DKIM DNS decoding from remote exploit, CVE-2012-5671. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

FreeBSD Ports: exim

The remote host is missing an update to the system as announced in the referenced advisory. VID b0f3ab1f-1f3b-11e2-8fe9-0022156e8794 OpenVAS Vulnerability Test $ Description: Auto generated from VID b0f3ab1f-1f3b-11e2-8fe9-0022156e8794 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: exim

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Exim 4.70 - 4.80 DKIM DNS Record Parsing Remote Buffer Overflow

According to its banner, the version of Exim running on the remote host is between 4.70 and 4.80 inclusive. It therefore is potentially affected by a remote, heap-based buffer overflow vulnerability when decoding DKIM DomainKeys Identified Mail DNS records that can be triggered by a specially...

exim buffer overflow

Buffer overflow on DKIM handling...

exim: overflow in DKIM handling fixed (critical)

This update fixes a remotely exploitable overflow in DKIM handling...

USN-1618-1: Exim vulnerability

It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code...

CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

FreeBSD : Exim -- remote code execution (b0f3ab1f-1f3b-11e2-8fe9-0022156e8794)

This vulnerability affects Exim instances built with DKIM enabled this is the default for FreeBSD Exim port and running verification of DKIM signatures on the incoming mail messages. Phil Penncock reports : This is a SECURITY release, addressing a CRITICAL remote code execution flaw in versions o...

Exim -- remote code execution

This vulnerability affects Exim instances built with DKIM enabled this is the default for FreeBSD Exim port and running verification of DKIM signatures on the incoming mail messages. Phil Penncock reports: This is a SECURITY release, addressing a CRITICAL remote code execution flaw in versions of...

Fedora Core 3 : exim-4.43-1.FC3.1 (2005-002)

This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function hostaton can overflow a buffer...

Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64

A privilege escalation flaw was discovered in Exim. If an attacker were able to gain access to the 'exim' user, they could cause Exim to execute arbitrary commands as the root user. CVE-2010-4345 This update adds a new configuration file, '/etc/exim/trusted-configs'. To prevent Exim from running...

Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64

A buffer overflow flaw was discovered in Exim's internal stringvformat function. A remote attacker could use this flaw to execute arbitrary code on the mail server running Exim. CVE-2010-4344 Note: successful exploitation would allow a remote attacker to execute arbitrary code as root on a...