Red Hat Security AdvisoryRHSA-2010:0970
exim security update
Released 2010-12-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) exim-4.63-5.el5_5.2, exim-4.63-5.el5_5.2.i386, exim-4.63-5.el5_5.2.ia64 +9
- Red Hat Enterprise Linux AS EUS (v. 4.7) exim-4.43-1.RHEL4.5.el4_7.1, exim-4.43-1.RHEL4.5.el4_7.1.i386, exim-4.43-1.RHEL4.5.el4_7.1.ia64 +13
- Red Hat Enterprise Linux AS version 4 exim-4.43-1.RHEL4.5.el4_8.1, exim-4.43-1.RHEL4.5.el4_8.1.i386, exim-4.43-1.RHEL4.5.el4_8.1.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) exim-4.63-5.el5_5.2, exim-4.63-5.el5_5.2.i386, exim-mon-4.63-5.el5_5.2 +3
- Red Hat Enterprise Linux Desktop version 4 exim-4.43-1.RHEL4.5.el4_8.1, exim-4.43-1.RHEL4.5.el4_8.1.i386, exim-doc-4.43-1.RHEL4.5.el4_8.1 +5
- Red Hat Enterprise Linux ES EUS (v. 4.7) exim-4.43-1.RHEL4.5.el4_7.1, exim-4.43-1.RHEL4.5.el4_7.1.i386, exim-4.43-1.RHEL4.5.el4_7.1.ia64 +9
- Red Hat Enterprise Linux ES version 4 exim-4.43-1.RHEL4.5.el4_8.1, exim-4.43-1.RHEL4.5.el4_8.1.i386, exim-4.43-1.RHEL4.5.el4_8.1.ia64 +9
- Red Hat Enterprise Linux EUS (v. 5.3 server) exim-4.63-3.el5_3.1, exim-4.63-3.el5_3.1.i386, exim-4.63-3.el5_3.1.ia64 +9
- Red Hat Enterprise Linux EUS (v. 5.4 server) exim-4.63-3.el5_4.1, exim-4.63-3.el5_4.1.i386, exim-4.63-3.el5_4.1.ia64 +9
- Red Hat Enterprise Linux WS version 4 exim-4.43-1.RHEL4.5.el4_8.1, exim-4.43-1.RHEL4.5.el4_8.1.i386, exim-4.43-1.RHEL4.5.el4_8.1.ia64 +9
Fixes 1 record
Priority CRITICAL 100KEV
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.71706 · Published 2010-12-14 · Fixed CWE-787
