exim -- two buffer overflow vulnerabilities

2005-01-0500:00:00

vuxml.freebsd.org

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.002

Percentile

56.3%

JSON

The function host_aton() can overflow a buffer
if it is presented with an illegal IPv6 address
that has more than 8 components.
The second report described a buffer overflow
in the function spa_base64_to_bits(), which is part
of the code for SPA authentication.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchexim< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-ldap< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-ldap2< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-mysql< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-postgresql< 4.43+28_1UNKNOWN
FreeBSDanynoarchexim-sa-exim< 4.43+28_1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	exim	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-ldap	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-ldap2	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-mysql	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-postgresql	< 4.43+28_1	UNKNOWN
FreeBSD	any	noarch	exim-sa-exim	< 4.43+28_1	UNKNOWN