CVE-2010-4344

Exim Heap-Based Buffer Overflow Vulnerability

Exim

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

14. Dez 2010

Ausgewertete Quellen

• Debian
  http://www.debian.org/security/2010/dsa-2131
• Red Hat
  http://www.redhat.com/support/errata/RHSA-2010-0970.html
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=661756
• Ubuntu
  http://www.ubuntu.com/usn/USN-1032-1
• Hersteller
  http://secunia.com/advisories/40019
• Hersteller
  http://secunia.com/advisories/42576
• Hersteller
  http://secunia.com/advisories/42586
• Hersteller
  http://secunia.com/advisories/42587
• Hersteller
  http://secunia.com/advisories/42589
• Hersteller
  http://www.vupen.com/english/advisories/2010/3171
• Hersteller
  http://www.vupen.com/english/advisories/2010/3172
• Hersteller
  http://www.vupen.com/english/advisories/2010/3181
• Hersteller
  http://www.vupen.com/english/advisories/2010/3186
• Hersteller
  http://www.vupen.com/english/advisories/2010/3204
• Hersteller
  http://www.vupen.com/english/advisories/2010/3246
• Hinweis
  http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html
• Hinweis
  http://openwall.com/lists/oss-security/2010/12/10/1
• Hinweis
  http://www.kb.cert.org/vuls/id/682457
• Hinweis
  http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format
• Hinweis
  http://www.securityfocus.com/archive/1/515172/100/0/threaded
• Hinweis
  http://www.securityfocus.com/bid/45308
• Hinweis
  http://www.securitytracker.com/id?1024858
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-4344
• CISA
  Exim Heap-Based Buffer Overflow Vulnerability
• NVD
  CVE-2010-4344