LWN.net Logo

exim4: format string vulnerability

Package(s):exim4 CVE #(s):CVE-2011-1764
Created:May 9, 2011 Updated:May 18, 2011
Description: From the Exim advisory:

A format string attack in logging DKIM information from an inbound mail may permit anyone who can send you email to cause code to be executed as the Exim run-time user. No exploit is known to exist, but we do not believe that an experienced attacker would find the exploit hard to construct.

Alerts:
Debian DSA-2232-1 2011-05-06
Fedora FEDORA-2011-7047 2011-05-17
Fedora FEDORA-2011-7059 2011-05-17
SUSE SUSE-SR:2011:009 2011-05-17
Ubuntu USN-1130-1 2011-05-10
openSUSE openSUSE-SU-2011:0456-1 2011-05-09
openSUSE openSUSE-SU-2012:1404-1 2012-10-27

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds