PT-2005-1154 · Exim+1 · Exim+1

Philip Hazel · Published 2005-01-06 · Updated 2017-10-11 · CVE-2005-0021

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.43

Description The issue is related to multiple buffer overflows that may allow attackers to execute arbitrary code. This can be triggered via an IPv6 address with more than 8 components using the -be command line option, which causes an overflow in the host aton function. Another trigger is through the -bh command line option or dnsdb PTR lookup, leading to an overflow in the dns build reverse function.

Recommendations For versions prior to 4.43, update to version 4.43 or later to resolve the issue. As a temporary workaround, consider restricting the use of the -be and -bh command line options until a patch is applied. Additionally, restrict dnsdb PTR lookup to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0021

DSA-635-1

DSA-637-1

RHSA-2005:025

RHSA-2005_025

Affected Products

Exim

Red Hat

References · 19

• 🔥 https://exploit-db.com/exploits/1009 · Exploit
• 🔥 http://idefense.com/application/poi/display?id=183&type=vulnerabilities · Exploit
• 🔥 https://exploit-db.com/exploits/756 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0021 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200501-23.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2005-0021 · Vendor Advisory
• http://debian.org/security/2005/dsa-637 · Vendor Advisory
• http://kb.cert.org/vuls/id/132992 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-0021 · Security Note
• http://debian.org/security/2005/dsa-635 · Vendor Advisory
• http://idefense.com/application/poi/display?id=179&type=vulnerabilities · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2005-0021 · Vendor Advisory
• http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347 · Note
• https://redhat.com/security/data/cve/CVE-2005-0022.html · Note