[SECURITY] [DSA 502-1] New exim-tls packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 502-1 [email protected] http://www.debian.org/security/ Martin Schulze May 11th, 2004 http://www.debian.org/security/faq -...

DSA-502 exim-tls - buffer overflow

Bulletin has no description...

[SECURITY] [DSA 501-1] New exim packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 501-1 [email protected] http://www.debian.org/security/ Martin Schulze May 7th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 501-1] New exim packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 501-1 [email protected] http://www.debian.org/security/ Martin Schulze May 7th, 2004 http://www.debian.org/security/faq -...

Georgi Guninski security advisory #68, 2004

Georgi Guninski security advisory 68, 2004 Buffer overflows in exim, yet still exim much better than windows Systems affected: two bugs in exim 3.35 one of them present in exim 4.32 Risk: Medium - not in default install Date: 6 May 2004 Legal Notice: This Advisory is Copyright c 2004 Georgi...

DSA-501 exim - buffer overflow

Bulletin has no description...

Exim < 3.36 / 4.33 Multiple Remote Overflows

The remote version of Exim has multiple remote stack-based buffer overflow vulnerabilities when header syntax checking is enabled. It should be noted that this is not the default configuration. A remote attacker could exploit this to execute arbitrary code. C Tenable Network Security, Inc...

exim buffer overflow when verify = header_syntax is used

A remote exploitable buffer overflow has been discovered in exim when verify = headersyntax is used in the configuration file. This does not affect the default configuration...

Exim Sender 3.35 - Verification Remote Stack Buffer Overrun

// source: https://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be triggered by a malicious e-mail. Exploitation may permit executi...

Exim Sender 3.35 - Verification Remote Stack Buffer Overrun

Exim Sender 3.35 - Verification Remote Stack Buffer Overrun // source: https://www.securityfocus.com/bid/10290/info Exim has been reported prone to a remotely exploitable stack-based buffer overrun vulnerability. This is exposed if sender verification has been enabled in the agent and may be...

CVE-2003-0743

Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...

[SECURITY] [DSA-376-2] New exim packages fix incorrect permissions on documentation

-------------------------------------------------------------------------- Debian Security Advisory DSA 376-2 [email protected] http://www.debian.org/security/ Matt Zimmerman September 7th, 2003 http://www.debian.org/security/faq -...

CVE-2003-0743

CVE-2003-0743 affects Exim 3 (before 3.36) and Exim 4 (before 4.21); a heap-based buffer overflow in smtp_in.c triggered by long, space-filled HELO/EHLO arguments followed by a NULL and newline could let remote attackers execute code. Debian advisory DSA-376 notes the remediation: updates to exim...

CVE-2003-0743

Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...

[SECURITY] [DSA-376-1] New exim, exim-tls packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 376-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 4th, 2003 http://www.debian.org/security/faq -...

DSA-376 exim - buffer overflow

Bulletin has no description...

exim buffer overflow

Buffer overflow with static string can be exploited as off-by-one...

exim remote heap overflow, probably not exploitable

Exim www.exim.org is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. There's a heap overflow in all versions of exim3 and exim4 prior to version 4.21. It can be exercised by anyone who can make an SMTP connection to the exim...

Exim < 4.22 smtp_in.c HELO/EHLO Remote Overflow

According to its banner, the version of Exim running on the remote host has a remote heap-based buffer overflow vulnerability. A remote, unauthenticated attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

CVE-2002-0274

CVE-2002-0274 : Affects Exim 3.34 and earlier. The vulnerability is a buffer overflow in the long -C (configuration file) and other command line arguments, enabling a local user to gain privileges. Root cause: improper handling of lengthy inputs in configuration/command line parsing leading to me...