574 matches found
Exim <= 4.43 auth_spa_server() Remote PoC Exploit
Exploit for linux platform in category remote exploits ================================================= Exim Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits...
Exim <= 4.43 auth_spa_server() Remote PoC Exploit
No description provided by source. / ecl-eximspa.c Yuri Gushin [email protected] Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size...
Exim 4.43 - 'auth_spa_server()' Remote
/ ecl-eximspa.c Yuri Gushin Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size buffer since there's no decent boundary checks before it...
Exim 4.43 - auth_spa_server() Remote
Exim 4.43 - authspaserver Remote / ecl-eximspa.c Yuri Gushin Howdy : This is pretty straightforward, an exploit for the recently discovered vulnerability in Exim's all versions prior to and including 4.43 SPA authentication code - spabase64tobits will overflow a fixed-size buffer since there's no...
Exim buffer overflows
Buffer overflows on SPA-authentications and IPv6 names resolution...
iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability
Exim authspaserver Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0731 www.idefense.com/application/poi/display?id=178&type=vulnerabilities January 07, 2004 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...
[SA13713] Exim IPv6 Handling and SPA Authentication Vulnerabilities
TITLE: Exim IPv6 Handling and SPA Authentication Vulnerabilities SECUNIA ADVISORY ID: SA13713 VERIFY ADVISORY: http://secunia.com/advisories/13713/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Exim 4.x http://secunia.com/product/841/...
Fedora Core 2 : exim-4.43-1.FC2.1 (2005-001)
This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function hostaton can overflow a buffer...
Exim < 4.44 Multiple Overflows
The remote host is running Exim, a message transfer agent SMTP. It is reported that Exim is prone to an IPv6 Address and an SPA authentication buffer overflow. An attacker, exploiting this issue, may be able to execute arbitrary code on the remote host. Exim must be configured with SPA...
CVE-2005-0022
CVE-2005-0022 affects Exim prior to 4.43. A buffer overflow in the SPA authentication path, via the function spa_base64_to_bits (base64 decoding), arises from insufficient input validation and can let an attacker execute arbitrary code during SPA authentication. Multiple connected advisories refe...
CVE-2005-0022
Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...
CVE-2005-0022
Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...
CVE-2005-0022: Undefined Security Weakness
Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...
exim -- two buffer overflow vulnerabilities
The function hostaton can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. 2. The second report described a buffer overflow in the function spabase64tobits, which is part of the code for SPA authentication...