CVE-2012-5671

CVE-2012-5671 describes a heap-based buffer overflow in Exim (DKIM DKIM handling) triggered by the function dkim_exim_query_dns_txt in dkim.c , affecting Exim versions 4.70–4.80 when DKIM is enabled and certain ACLs are not configured to disable verification. This allows remote attackers to execu...

CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

Fedora 17 : exim-4.76-9.fc17 (2012-17044)

This update protect DKIM DNS decoding from remote exploit, CVE-2012-5671. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Debian Security Advisory DSA 2566-1 (exim4)

The remote host is missing an update to exim4 announced via advisory DSA 2566-1. OpenVAS Vulnerability Test $Id: deb25661.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2566-1 exim4 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Ubuntu Update for exim4 USN-1618-1

Ubuntu Update for Linux kernel vulnerabilities USN-1618-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16181.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for exim4 USN-1618-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Debian DSA-2566-1 : exim4 - heap-based buffer overflow

It was discovered that Exim, a mail transport agent, is not properly handling the decoding of DNS records for DKIM. Specifically, crafted records can yield to a heap-based buffer overflow. An attacker can exploit this flaw to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security,...

Exim 4.70 - 4.80 DKIM DNS Record Parsing Remote Buffer Overflow

According to its banner, the version of Exim running on the remote host is between 4.70 and 4.80 inclusive. It therefore is potentially affected by a remote, heap-based buffer overflow vulnerability when decoding DKIM DomainKeys Identified Mail DNS records that can be triggered by a specially...

Ubuntu: Security Advisory (USN-1618-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

exim buffer overflow

Buffer overflow on DKIM handling...

[SECURITY] [DSA 2566-1] exim4 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2566-1 [email protected] http://www.debian.org/security/ Nico Golde October 25, 2012 http://www.debian.org/security/faq -...

exim: overflow in DKIM handling fixed (critical)

This update fixes a remotely exploitable overflow in DKIM handling...

USN-1618-1: Exim vulnerability

It was discovered that Exim incorrectly handled DKIM DNS decoding. This flaw could allow a remote attacker to execute arbitrary code...

DSA-2566-1 exim4 - heap overflow

Bulletin has no description...

CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

FreeBSD : Exim -- remote code execution (b0f3ab1f-1f3b-11e2-8fe9-0022156e8794)

This vulnerability affects Exim instances built with DKIM enabled this is the default for FreeBSD Exim port and running verification of DKIM signatures on the incoming mail messages. Phil Penncock reports : This is a SECURITY release, addressing a CRITICAL remote code execution flaw in versions o...

Exim -- remote code execution

This vulnerability affects Exim instances built with DKIM enabled this is the default for FreeBSD Exim port and running verification of DKIM signatures on the incoming mail messages. Phil Penncock reports: This is a SECURITY release, addressing a CRITICAL remote code execution flaw in versions of...

DomainKeys Identified Mail (DKIM) Verifiers may inappropriately convey message trust

Overview DomainKeys Identified Mail DKIM Verifiers may inappropriately convey message trust when messages are signed using keys that are too weak 1024 bits or that are marked as test keys. Description RFC 6376 states "DomainKeys Identified Mail DKIM permits a person, role, or organization to clai...

DomainKeys Identified Mail (DKIM) Verifiers may inappropriately convey message trust

US-CERT reports: DomainKeys Identified Mail DKIM Verifiers may inappropriately convey message trust when messages are signed using test or small bit signing keys...

New .Secure Global TLD Proposed

A group of security experts is working to put together a new global TLD that will require companies and individuals applying for domains to adhere to strict security policies and requirements. The proposed .secure TLD is intended to be a known safe group of domains and would include mandatory use...

Google, Facebook and Others Join to Write New Email-Authentication Spec Called DMARC

Google, Yahoo, AOL and a group of other large email senders and receivers have banded together to develop a new framework for sending and receiving email that is designed to stop phishing attacks and other email-borne scams. Called DMARC.org, the new group has come up with a specification called...