Multiple vulnerabilities have been found in Exim, the worst of which allows arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.99.4 | >= 4.99.4 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.99.4"
Multiple vulnerabilities have been discovered in Exim, the worst of which can lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.97.1 | >= 4.97.1 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.97.1"
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.94.2 | >= 4.94.2 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details.
A remote attacker, by connecting to the SMTP listener daemon, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition. Furthermore, a local attacker could perform symlink attacks to overwrite arbitrary files with the privileges of the user running the application or escalate privileges.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.94.2"
A vulnerability in Exim could allow a remote attacker to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.92.3 | >= 4.92.3 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
It was discovered that Exim incorrectly handled certain string operations.
A remote attacker, able to connect to a vulnerable Exim instance, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.92.3"
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.92.2 | >= 4.92.2 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details.
A remote attacker, by connecting to the SMTP listener daemon, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.92.2"
A vulnerability in Exim could allow a remote attacker to execute arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.92 | >= 4.92 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
A vulnerability was discovered in how Exim validates recipient addresses in the deliver_message() function.
A remote attacker could execute arbitrary commands by sending an email with a specially crafted recipient address to the affected system.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.92"
Multiple vulnerabilities have been found in Exim, the worst of which allows remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.90.1 | >= 4.90.1 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details.
A remote attacker, by connecting to the SMTP listener daemon, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.90.1"
A vulnerability in Exim may allow local users to gain root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.89-r1 | >= 4.89-r1 |
Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet.
Exim supports the use of multiple “-p” command line arguments causing a memory leak. This could lead to a stack-clash in user-space and as result the attacker can, “clash” or “smash” the stack or another memory region, or “jump” over the stack guard-page.
A local attacker could obtain root privileges.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.89-r1"
A local attacker could execute arbitrary code by providing unsanitized data to a data source or escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.87 | >= 4.87 |
Exim is a message transfer agent (MTA) designed to be a a highly configurable, drop-in replacement for sendmail.
Vulnerabilities have been discovered in Exim’s implementation of set-uid root and when using ‘perl_startup’. These vulnerabilities require a user account on the Exim server and a configuration that does lookups against files to which the user has edit access.
A local attacker could possibly execute arbitrary code with the privileges of the process, or escalate privileges.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.87"
Multiple vulnerabilities were found in Exim, the worst of which leading to remote execution of arbitrary code with root privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.80.1 | >= 4.80.1 |
Exim is a highly configurable, drop-in replacement for sendmail.
Multiple vulnerabilities have been discovered in Exim. Please review the CVE identifiers referenced below for details.
A remote attacker could possibly execute arbitrary code with root privileges, or cause a Denial of Service condition.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.80.1"
Buffer overflow vulnerabilities, which could lead to arbitrary code execution, have been found in the handling of IPv6 addresses as well as in the SPA authentication mechanism in Exim.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | < 4.43-r2 | >= 4.43-r2 |
Exim is an highly configurable message transfer agent (MTA) developed at the University of Cambridge.
Buffer overflows have been found in the host_aton() function (CAN-2005-0021) as well as in the spa_base64_to_bits() function (CAN-2005-0022), which is part of the SPA authentication code.
A local attacker could trigger the buffer overflow in host_aton() by supplying an illegal IPv6 address with more than 8 components, using a command line option. The second vulnerability could be remotely exploited during SPA authentication, if it is enabled on the server. Both buffer overflows can potentially lead to the execution of arbitrary code.
There is no known workaround at this time.
All Exim users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-mta/exim-4.43-r2"
When the verify=header_syntax option is set, there is a buffer overflow in Exim that allows remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-mta/exim | * | <= 4.33 | >= 4.33-r1 |
Exim is an highly configurable message transfer agent (MTA) developed at the University of Cambridge.
When the option "verify = header_syntax" is used in an ACL in the configuration file, Exim is vulnerable to a buffer overflow attack that can be triggered remotely by sending malicious headers in an email message. Note that this option is not enabled in Exim's default configuration file.
This vulnerability can be exploited to trigger a denial of service attack and potentially execute arbitrary code with the rights of the user used by the Exim daemon (by default this is the "mail" user in Gentoo Linux).
Make sure the verify=header_syntax option is not used in your exim.conf file.
All users of Exim should upgrade to the latest stable version:
# emerge sync # emerge -pv ">=mail-mta/exim-4.33-r1" # emerge ">=mail-mta/exim-4.33-r1"