PT-2010-5427 · Exim+1 · Exim+1
Josh Bressers
·
Publicado
2010-12-10
·
Atualizado
2025-03-13
·
CVE-2010-4344
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Exim versions prior to 4.70
Description
The issue is related to a heap-based buffer overflow in the
string vformat function, allowing remote attackers to execute arbitrary code via an SMTP session. This can be achieved by including two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging. The estimated number of potentially affected devices worldwide is not specified.Recommendations
For Exim versions prior to 4.70, update to version 4.70 or later to resolve the issue. As a temporary workaround, consider restricting access to the
string vformat function in the string.c file until a patch is available. Avoid using crafted headers in large messages via SMTP sessions to minimize the risk of exploitation.Exploit
Correção
RCE
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Exim
Red Hat