PT-2003-1836 · Exim · Exim

Nick Cleaton · Published 2003-09-06 · Updated 2016-10-18 · CVE-2003-0743

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Exim 3 versions prior to 3.36 Exim 4 versions prior to 4.21

Description: The issue is related to a heap-based buffer overflow in the smtp in.c file. This can be exploited by remote attackers who send an invalid HELO or EHLO argument with a large number of spaces, followed by a NULL character and a newline. The argument is not properly trimmed before being appended to the buffer, potentially allowing the execution of arbitrary code.

Recommendations: For Exim 3 versions prior to 3.36, update to version 3.36 or later. For Exim 4 versions prior to 4.21, update to version 4.21 or later.

Fix

Related Identifiers

CVE-2003-0743

DSA-376

Affected Products

Exim

References · 10

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000735 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0743 · Security Note
• http://debian.org/security/2003/dsa-376 · Vendor Advisory
• http://exim.org/pipermail/exim-users/Week-of-Mon-20030811/057809.html · Note
• http://exim.org/pipermail/exim-users/Week-of-Mon-20030811/057720.html · Note
• http://exim.org/pipermail/exim-announce/2003q3/000094.html · Note
• http://packages.debian.org/changelogs/pool/main/e/exim4/exim4_4.34-10/changelog · Note
• http://packages.debian.org/changelogs/pool/main/e/exim/exim_3.36-13/changelog · Note
• http://marc.info/?l=bugtraq&m=106252015820395&w=2 · Note
• http://marc.info/?l=vuln-dev&m=106264740820334&w=2 · Note