Lucene search

[email protected]CVE-2011-1764

HistoryOct 05, 2011 - 2:56 a.m.

CVE-2011-1764

2011-10-0502:56:24

CWE-134

[email protected]

web.nvd.nist.gov

exim

cve-2011-1764

format string vulnerability

security

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.097 Low

EPSS

Percentile

94.8%

JSON

Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.

Affected configurations

NVD

Node

eximeximRange≤4.75

eximeximMatch2.10

eximeximMatch2.11

eximeximMatch2.12

eximeximMatch3.00

eximeximMatch3.01

eximeximMatch3.02

eximeximMatch3.03

eximeximMatch3.10

eximeximMatch3.11

eximeximMatch3.12

eximeximMatch3.13

eximeximMatch3.14

eximeximMatch3.15

eximeximMatch3.16

eximeximMatch3.20

eximeximMatch3.21

eximeximMatch3.22

eximeximMatch3.30

eximeximMatch3.31

eximeximMatch3.32

eximeximMatch3.33

eximeximMatch3.34

eximeximMatch3.35

eximeximMatch3.36

eximeximMatch4.00

eximeximMatch4.01

eximeximMatch4.02

eximeximMatch4.03

eximeximMatch4.04

eximeximMatch4.05

eximeximMatch4.10

eximeximMatch4.11

eximeximMatch4.12

eximeximMatch4.14

eximeximMatch4.20

eximeximMatch4.21

eximeximMatch4.22

eximeximMatch4.23

eximeximMatch4.24

eximeximMatch4.30

eximeximMatch4.31

eximeximMatch4.32

eximeximMatch4.33

eximeximMatch4.34

eximeximMatch4.40

eximeximMatch4.41

eximeximMatch4.42

eximeximMatch4.43

eximeximMatch4.44

eximeximMatch4.50

eximeximMatch4.51

eximeximMatch4.52

eximeximMatch4.53

eximeximMatch4.54

eximeximMatch4.60

eximeximMatch4.61

eximeximMatch4.62

eximeximMatch4.63

eximeximMatch4.64

eximeximMatch4.65

eximeximMatch4.66

eximeximMatch4.67

eximeximMatch4.68

eximeximMatch4.69

eximeximMatch4.70

eximeximMatch4.71

eximeximMatch4.72

eximeximMatch4.73

eximeximMatch4.74

CPENameOperatorVersion
exim:eximeximle4.75
exim:eximeximeq2.10
exim:eximeximeq2.11
exim:eximeximeq2.12
exim:eximeximeq3.00
exim:eximeximeq3.01
exim:eximeximeq3.02
exim:eximeximeq3.03
exim:eximeximeq3.10
exim:eximeximeq3.11

CPE	Name	Operator	Version
exim:exim	exim	le	4.75
exim:exim	exim	eq	2.10
exim:exim	exim	eq	2.11
exim:exim	exim	eq	2.12
exim:exim	exim	eq	3.00
exim:exim	exim	eq	3.01
exim:exim	exim	eq	3.02
exim:exim	exim	eq	3.03
exim:exim	exim	eq	3.10
exim:exim	exim	eq	3.11