PT-2019-3248 · Exim+2 · Exim+2

Heiko Schlittermann · Publicado 2018-03-12 · Atualizado 2025-02-04 · CVE-2019-15846

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.92.2

Description The issue is related to errors in object handling in memory, allowing a remote attacker to gain access to confidential data, disrupt its integrity, and cause a denial of service. It also allows remote attackers to execute arbitrary code as root via a trailing backslash. The vulnerability can be exploited by sending a specially crafted client certificate or a modified value in the SNI. At least half a million email servers are potentially affected.

Recommendations For Exim versions prior to 4.92.2, update to version 4.92.2 to patch the issue. As a temporary workaround, consider disabling TLS support to minimize the risk of exploitation. Restrict access to the Exim server to prevent remote code execution attacks. Avoid using the SNI feature until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-1409

ALT-PU-2020-2318

ALT-PU-2021-1764

ALT-PU-2022-2269

BDU:2019-03238

CVE-2019-15846

DLA-1911-1

DSA-4517-1

OPENSUSE-SU-2019:2093-1

OPENSUSE-SU-2019_2093-1

OPENSUSE-SU-2021:0753-1

OPENSUSE-SU-2021_0677-1

OPENSUSE-SU-2024:10746-1

USN-4124-1

USN-4124-2

Produtos afetados

Exim

Suse

Ubuntu

Referências · 120

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/exim_perl_startup.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md · Exploit
• 🔥 https://github.com/lucky/bad_actor_poc · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2019-15846 · Exploit
• 🔥 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 · Exploit
• 🔥 https://github.com/Diefunction/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cowbe0x004/eximrce-CVE-2019-10149 · Exploit
• 🔥 https://github.com/MNEMO-CERT/PoC--CVE-2019-10149_Exim · Exploit
• 🔥 https://github.com/martinclauss/exim-rce-cve-2018-6789 · Exploit
• 🔥 https://github.com/synacktiv/Exim-CVE-2018-6789 · Exploit
• 🔥 https://github.com/AzizMea/CVE-2019-10149-privilege-escalation · Exploit
• 🔥 https://github.com/dorkerdevil/CVE-2020-28018 · Exploit
• 🔥 https://github.com/darsigovrustam/CVE-2019-10149 · Exploit
• 🔥 https://github.com/cloudflare/exim-cve-2019-10149-data · Exploit