Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1764
HistoryMay 10, 2011 - 12:00 a.m.

CVE-2011-1764

2011-05-1000:00:00
ubuntu.com
ubuntu.com
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.092 Low

EPSS

Percentile

94.6%

Format string vulnerability in the dkim_exim_verify_finish function in
src/dkim.c in Exim before 4.76 might allow remote attackers to execute
arbitrary code or cause a denial of service (daemon crash) via format
string specifiers in data used in DKIM logging, as demonstrated by an
identity field containing a % (percent) character.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchexim4< 4.71-3ubuntu1.2UNKNOWN
ubuntu10.10noarchexim4< 4.72-1ubuntu1.2UNKNOWN
ubuntu11.04noarchexim4< 4.74-1ubuntu1.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.092 Low

EPSS

Percentile

94.6%