Test ID:	1.3.6.1.4.1.25623.1.0.50427
Category:	Fedora Local Security Checks
Title:	Fedora Core 2 FEDORA-2005-001 (exim)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to exim announced via advisory FEDORA-2005-001. This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function host_aton() can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. 2. The second report described a buffer overflow in the function spa_base64_to_bits(), which is part of the code for SPA authentication. This code originated in the Samba project. The overflow can be exploited only if you are using SPA authentication. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/2/ c962c75145017206cde8c67fd7a56eb7 SRPMS/exim-4.43-1.FC2.1.src.rpm a533e222f4ff2beb0536daf177def1b8 x86_64/exim-4.43-1.FC2.1.x86_64.rpm c0639fcca5b8bbca2e753155a2c34532 x86_64/exim-mon-4.43-1.FC2.1.x86_64.rpm 7fe11efcfb57bf044d0bf2f09c53f6f2 x86_64/exim-doc-4.43-1.FC2.1.x86_64.rpm b28149b3e7e2fed0dee72e30ad39a52b x86_64/exim-sa-4.43-1.FC2.1.x86_64.rpm 283a93d612b65e2a514ba6fc8131677d x86_64/debug/exim-debuginfo-4.43-1.FC2.1.x86_64.rpm f2d1181933fa6f6b34cd1ae71bee16a4 i386/exim-4.43-1.FC2.1.i386.rpm 628be45b2a947f7579c4dd068ac45bf1 i386/exim-mon-4.43-1.FC2.1.i386.rpm 16f125efa84916c076586c01ba6d4e8c i386/exim-doc-4.43-1.FC2.1.i386.rpm c94d60d7d71b6dffe3a06967c45ce79f i386/exim-sa-4.43-1.FC2.1.i386.rpm e7233593925bf8a0003a9ca7c74c2bdd i386/debug/exim-debuginfo-4.43-1.FC2.1.i386.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://fedoranews.org/blog/index.php?p=251 Risk factor : High CVSS Score: 7.2
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0021 CERT/CC vulnerability note: VU#132992 http://www.kb.cert.org/vuls/id/132992 Debian Security Information: DSA-635 (Google Search) http://www.debian.org/security/2005/dsa-635 Debian Security Information: DSA-637 (Google Search) http://www.debian.org/security/2005/dsa-637 http://security.gentoo.org/glsa/glsa-200501-23.xml http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347 http://www.redhat.com/support/errata/RHSA-2005-025.html Common Vulnerability Exposure (CVE) ID: CVE-2005-0022 BugTraq ID: 12188 http://www.securityfocus.com/bid/12188 Bugtraq: 20050212 exim auth_spa_server() PoC exploit (Google Search) http://marc.info/?l=bugtraq&m=110824870908614&w=2 http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.