exim: buffer overflows [LWN.net]

Package(s):

exim

CVE #(s):

CAN-2005-0021 CAN-2005-0022

Created:

January 7, 2005

Updated:

February 15, 2005

Description:

A buffer overflow in the host_aton() function in Exim 4.4x may allow execution of arbitrary commands with elevated privileges by a local user. This has been patched in Exim 4.43.

Additionally, there is a another buffer overflow in Exim's auth_spa_server() which also be fixed in Exim 4.43.

Alerts:

(Log in to post comments)

exim: buffer overflows - they *do* affect 4.43

Posted Jan 13, 2005 9:42 UTC (Thu) by planet12 (guest, #4199) [Link]

Warning: the information above is not quite right - these patches are against 4.43. It is not, I repeat NOT, fixed in 4.43.

If you're running 4.43, or earlier, you will likely want the patches in the message linked below:

(link here for convenience; it's also in the iSec advisory)