iDEFENSE Security Advisory [IDEF0731] Exim auth_spa_server() Buffer Overflow Vulnerability

Exim authspaserver Buffer Overflow Vulnerability iDEFENSE Security Advisory IDEF0731 www.idefense.com/application/poi/display?id=178&type=vulnerabilities January 07, 2004 I. BACKGROUND Exim is a message transfer agent developed for use on Unix systems. More information is available at:...

[SA13713] Exim IPv6 Handling and SPA Authentication Vulnerabilities

TITLE: Exim IPv6 Handling and SPA Authentication Vulnerabilities SECUNIA ADVISORY ID: SA13713 VERIFY ADVISORY: http://secunia.com/advisories/13713/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Exim 4.x http://secunia.com/product/841/...

Fedora Core 2 : exim-4.43-1.FC2.1 (2005-001)

This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function hostaton can overflow a buffer...

Exim < 4.44 Multiple Overflows

The remote host is running Exim, a message transfer agent SMTP. It is reported that Exim is prone to an IPv6 Address and an SPA authentication buffer overflow. An attacker, exploiting this issue, may be able to execute arbitrary code on the remote host. Exim must be configured with SPA...

CVE-2005-0022

Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...

CVE-2005-0022

CVE-2005-0022 affects Exim prior to 4.43. A buffer overflow in the SPA authentication path, via the function spa_base64_to_bits (base64 decoding), arises from insufficient input validation and can let an attacker execute arbitrary code during SPA authentication. Multiple connected advisories refe...

CVE-2005-0022

Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...

CVE-2005-0022: Undefined Security Weakness

Buffer overflow in the spabase64tobits function in Exim before 4.43, as originally obtained from Samba code, and as called by the authspaclient function, may allow attackers to execute arbitrary code during SPA authentication...

exim -- two buffer overflow vulnerabilities

The function hostaton can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. 2. The second report described a buffer overflow in the function spabase64tobits, which is part of the code for SPA authentication...