PT-2012-6069 · Exim+2 · Exim+2

Phil Pennock · Published 2012-10-27 · Updated 2024-06-15 · CVE-2012-5671

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Exim versions 4.70 through 4.80

Description The issue is a heap-based buffer overflow in the dkim exim query dns txt function, which can be exploited by remote attackers to execute arbitrary code. This can occur when DKIM support is enabled and specific settings, acl smtp connect and acl smtp rcpt, are not configured to disable DKIM verification. The attack vector involves an email from a malicious DNS server.

Recommendations For Exim versions 4.70 through 4.80, consider disabling DKIM support or setting acl smtp connect and acl smtp rcpt to "warn control = dkim disable verify" to mitigate the risk of exploitation.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2014-1684

CVE-2012-5671

DSA-2566-1

OPENSUSE-SU-2012_1404-1

OPENSUSE-SU-2024:10017-1

Affected Products

Alt Linux

Exim

Suse

References · 39

• https://nvd.nist.gov/vuln/detail/CVE-2012-5671 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091664.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10017-1 · Vendor Advisory
• http://debian.org/security/2012/dsa-2566 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00018.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-5671 · Vendor Advisory
• http://secunia.com/advisories/51098 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-1684 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5671 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-5671 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-5671 · Vendor Advisory
• http://ubuntu.com/usn/USN-1618-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090900.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090963.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2011-0017 · Note