ID de Prueba:	1.3.6.1.4.1.25623.1.0.140539
Categoría:	SMTP problems
Título:	Exim Multiple RCE Vulnerabilities
Resumen:	Exim is prone to multiple remote code execution (RCE) vulnerabilities.
Descripción:	Summary: Exim is prone to multiple remote code execution (RCE) vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2017-16943: Use-after-free vulnerability while reading mail header - CVE-2017-16944: Exim handles BDAT data incorrectly and leads to crash Vulnerability Impact: A remote attacker may execute arbitrary commands or conduct a denial of service attack. Affected Software/OS: Exim version 4.88 and 4.89. Solution: Apply the provided patch or update to version 4.90 or later. As a mitigation set 'chunking_advertise_hosts = ' in the Exim configuration. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-16943 Debian Security Information: DSA-4053 (Google Search) https://www.debian.org/security/2017/dsa-4053 http://openwall.com/lists/oss-security/2017/11/25/1 http://openwall.com/lists/oss-security/2017/11/25/2 http://openwall.com/lists/oss-security/2017/11/25/3 https://bugs.exim.org/show_bug.cgi?id=2199 https://git.exim.org/exim.git/commit/4090d62a4b25782129cc1643596dc2f6e8f63bde https://git.exim.org/exim.git/commitdiff/4e6ae6235c68de243b1c2419027472d7659aa2b4 https://github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944 https://lists.exim.org/lurker/message/20171125.034842.d1d75cac.en.html http://www.openwall.com/lists/oss-security/2021/05/04/7 http://www.securitytracker.com/id/1039872 Common Vulnerability Exposure (CVE) ID: CVE-2017-16944 https://www.exploit-db.com/exploits/43184/ https://bugs.exim.org/show_bug.cgi?id=2201 http://www.securitytracker.com/id/1039873
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.