PT-2011-3355 · Exim+1 · Exim+1

John R. Levine + 1 · Published 2011-10-05 · Updated 2024-06-15 · CVE-2011-1764

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.76

Description The issue is related to a format string vulnerability in the dkim exim verify finish function. This vulnerability might allow remote attackers to execute arbitrary code or cause a denial of service, such as a daemon crash, via format string specifiers in data used in DKIM logging. For example, an identity field containing a % (percent) character could trigger this issue.

Recommendations For versions prior to 4.76, update to version 4.76 or later to resolve the issue. As a temporary workaround, consider restricting the use of format string specifiers in DKIM logging data to minimize the risk of exploitation.

Fix

DoS

RCE

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2011-1764

DSA-2232-1

OPENSUSE-SU-2012_1404-1

OPENSUSE-SU-2024:10017-1

Affected Products

Exim

Suse

References · 28

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=702474 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1764 · Vendor Advisory
• http://bugs.exim.org/show_bug.cgi?id=1106 · Patch
• https://osv.dev/vulnerability/CVE-2011-1764 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10017-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-1764 · Vendor Advisory
• http://debian.org/security/2011/dsa-2232 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1764 · Security Note
• http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8 · Patch
• https://suse.com/security/cve/CVE-2011-0017 · Note
• https://suse.com/security/cve/CVE-2011-1407 · Note
• https://bugzilla.novell.com/670711 · Note
• http://support.novell.com/security/cve/CVE-2012-5671.html · Note