Test Kennung:	1.3.6.1.4.1.25623.1.0.140539
Kategorie:	SMTP problems
Titel:	Exim Multiple RCE Vulnerabilities
Zusammenfassung:	Exim is prone to multiple remote code execution (RCE) vulnerabilities.
Beschreibung:	Summary: Exim is prone to multiple remote code execution (RCE) vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2017-16943: Use-after-free vulnerability while reading mail header - CVE-2017-16944: Exim handles BDAT data incorrectly and leads to crash Vulnerability Impact: A remote attacker may execute arbitrary commands or conduct a denial of service attack. Affected Software/OS: Exim version 4.88 and 4.89. Solution: Apply the provided patch or update to version 4.90 or later. As a mitigation set 'chunking_advertise_hosts = ' in the Exim configuration. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-16943 Debian Security Information: DSA-4053 (Google Search) https://www.debian.org/security/2017/dsa-4053 http://openwall.com/lists/oss-security/2017/11/25/1 http://openwall.com/lists/oss-security/2017/11/25/2 http://openwall.com/lists/oss-security/2017/11/25/3 https://bugs.exim.org/show_bug.cgi?id=2199 https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html http://www.openwall.com/lists/oss-security/2021/05/04/7 http://www.securitytracker.com/id/1039872 Common Vulnerability Exposure (CVE) ID: CVE-2017-16944 https://www.exploit-db.com/exploits/43184/ https://bugs.exim.org/show_bug.cgi?id=2201 http://www.securitytracker.com/id/1039873
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.