2211 matches found
iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability
Exim authspaserver Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0731 www.idefense.com/application/poi/display?id=178&type=vulnerabilities January 07, 2004 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...
iDEFENSE Security Advisory [IDEF0725] Exim host_aton() Buffer Overflow Vulnerability
Exim hostaton Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0725 http://www.idefense.com/application/poi/display?type=vulnerabilities January 07, 2005 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...
USN-56-1: exim4 vulnerabilities
A flaw has been found in the hostaton function, which can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. When supplying certain command line parameters, the input was not checked, so that a local attacker could possibly exploit the buffer overfl...
Fedora Core 2 : exim-4.43-1.FC2.1 (2005-001)
This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function hostaton can overflow a buffer...
Exim < 4.44 Multiple Overflows
The remote host is running Exim, a message transfer agent SMTP. It is reported that Exim is prone to an IPv6 Address and an SPA authentication buffer overflow. An attacker, exploiting this issue, may be able to execute arbitrary code on the remote host. Exim must be configured with SPA...
[SA13713] Exim IPv6 Handling and SPA Authentication Vulnerabilities
TITLE: Exim IPv6 Handling and SPA Authentication Vulnerabilities SECUNIA ADVISORY ID: SA13713 VERIFY ADVISORY: http://secunia.com/advisories/13713/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Exim 4.x http://secunia.com/product/841/...
CVE-2005-0021
CVE-2005-0021 affects Exim before 4.43 and allows local code execution through two buffer overflow paths: (1) host_aton() overflow when given an illegal IPv6 address with more than 8 components (triggered via -be or dnsdb PTR lookup), and (2) dns_build_reverse() overflow (triggered by -bh or DNS ...
CVE-2005-0022
Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...
CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...
CVE-2005-0022
Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...
CVE-2005-0022
CVE-2005-0022 affects Exim prior to 4.43. A buffer overflow in the SPA authentication path, via the function spa_base64_to_bits (base64 decoding), arises from insufficient input validation and can let an attacker execute arbitrary code during SPA authentication. Multiple connected advisories refe...
CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via 1 an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the hostaton function, or 2 the -bh command line option or dnsdb PTR...
exim -- two buffer overflow vulnerabilities
The function hostaton can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. 2. The second report described a buffer overflow in the function spabase64tobits, which is part of the code for SPA authentication...
Debian DSA-097-1 : exim - Uncontrolled program execution
Patrice Fournier discovered a bug in all versions of Exim older than Exim 3.34 and Exim 3.952. The Exim maintainer, Philip Hazel, writes about this issue: 'The problem exists only in the case of a run time configuration which directs or routes an address to a pipe transport without checking the...
Debian DSA-058-1 : exim - local printf format attack
Megyer Laszlo found a printf format bug in the exim mail transfer agent. The code that checks the header syntax of an email logs an error without protecting itself against printf format attacks. It's only exploitable locally with the -bS switch in batched SMTP mode. %NASLMINLEVEL 70300 C Tenable...
Debian DSA-376-2 : exim - buffer overflow
A buffer overflow exists in exim, which is the standard mail transport agent in Debian. By supplying a specially crafted HELO or EHLO command, an attacker could cause a constant string to be written past the end of a buffer allocated on the heap. This vulnerability is not believed at this time to...
Debian DSA-501-1 : exim - buffer overflow
Georgi Guninski discovered two stack-based buffer overflows. They can not be exploited with the default configuration from the Debian system, though. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : - CAN-2004-0399 When...
Debian DSA-502-1 : exim-tls - buffer overflow
Georgi Guninski discovered two stack-based buffer overflows in exim and exim-tls. They cannot be exploited with the default configuration from the Debian system, though. The Common Vulnerabilities and Exposures project identifies the following problems that are fixed with this update : -...