Test ID:	1.3.6.1.4.1.25623.1.0.50434
Category:	Fedora Local Security Checks
Title:	Fedora Core 3 FEDORA-2005-001 (exim)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to exim announced via advisory FEDORA-2005-001. This erratum fixes two relatively minor security issues which were discovered in Exim in the last few weeks. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the names CVE-2005-0021 and CVE-2005-0022 to these, respectively. 1. The function host_aton() can overflow a buffer if it is presented with an illegal IPv6 address that has more than 8 components. 2. The second report described a buffer overflow in the function spa_base64_to_bits(), which is part of the code for SPA authentication. This code originated in the Samba project. The overflow can be exploited only if you are using SPA authentication. This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/ f4cafadca104a85ff5f31cbf5ca4c4f1 SRPMS/exim-4.43-1.FC3.1.src.rpm 3412f5b4cf40ad504dbaf2b7e2fffa62 x86_64/exim-4.43-1.FC3.1.x86_64.rpm 1446c41e65cfd6f15ae60b969ab3d20c x86_64/exim-mon-4.43-1.FC3.1.x86_64.rpm e71be8446d9e4d250ca40a41c2d7b49a x86_64/exim-doc-4.43-1.FC3.1.x86_64.rpm 1d515c5be494e657333549f72f4621e2 x86_64/exim-sa-4.43-1.FC3.1.x86_64.rpm bcd320d0c2f88911a3ccc02b95cb2843 x86_64/debug/exim-debuginfo-4.43-1.FC3.1.x86_64.rpm 7c2205113fe3285a76b797748845548b i386/exim-4.43-1.FC3.1.i386.rpm 8227e5701319639057b951bc45bbecf8 i386/exim-mon-4.43-1.FC3.1.i386.rpm 3b7e2741f4208757e92ab2d228b1fe8a i386/exim-doc-4.43-1.FC3.1.i386.rpm 4e5cbfea028184d6710443a3c0e79c29 i386/exim-sa-4.43-1.FC3.1.i386.rpm 9c2c6e5d633104ca71bf80b062e9f0a2 i386/debug/exim-debuginfo-4.43-1.FC3.1.i386.rpm This update can also be installed with the Update Agent you can launch the Update Agent with the 'up2date' command. Solution: Apply the appropriate updates. http://fedoranews.org/blog/index.php?p=252 Risk factor : High CVSS Score: 7.2
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0021 CERT/CC vulnerability note: VU#132992 http://www.kb.cert.org/vuls/id/132992 Debian Security Information: DSA-635 (Google Search) http://www.debian.org/security/2005/dsa-635 Debian Security Information: DSA-637 (Google Search) http://www.debian.org/security/2005/dsa-637 http://security.gentoo.org/glsa/glsa-200501-23.xml http://www.idefense.com/application/poi/display?id=179&type=vulnerabilities http://www.idefense.com/application/poi/display?id=183&type=vulnerabilities http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347 http://www.redhat.com/support/errata/RHSA-2005-025.html Common Vulnerability Exposure (CVE) ID: CVE-2005-0022 BugTraq ID: 12188 http://www.securityfocus.com/bid/12188 Bugtraq: 20050212 exim auth_spa_server() PoC exploit (Google Search) http://marc.info/?l=bugtraq&m=110824870908614&w=2 http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.