Lucene search
UbuntuUSN-1135-1HistoryMay 25, 2011 - 12:00 a.m.
Exim vulnerability
2011-05-2500:00:00
ubuntu.com
48
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.066
Percentile
93.8%
Releases
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04
Packages
- exim4 - metapackage to ease Exim MTA (v4) installation
Details
It was discovered that the Exim daemon did not correctly handle certain
DKIM identities. A remote attacker could send specially crafted email to
run arbitrary code as the Exim user.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 11.04 | noarch | exim4-daemon-heavy | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-base | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-daemon-heavy-dbg | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-daemon-light | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-daemon-light-dbg | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-dbg | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-dev | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | eximon4 | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 11.04 | noarch | exim4-daemon-custom | < 4.74-1ubuntu1.2 | UNKNOWN |
| Ubuntu | 10.10 | noarch | exim4-daemon-heavy | < 4.72-1ubuntu1.3 | UNKNOWN |
References
Related
debian
debian
[BSA-036] Security Update for exim4
2011-05-14 14:31:58
[SECURITY] [DSA 2236-1] exim4 security update
2011-05-12 20:33:27
osv
osv
exim4 - command injection
2011-05-12 00:00:00
exim-4.86.2-2.2 on GA media
2024-06-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1135-1)
2011-06-03 00:00:00
Debian Security Advisory DSA 2236-1 (exim4)
2011-08-03 00:00:00
Debian: Security Advisory (DSA-2236-1)
2011-08-03 00:00:00
nessus
nessus
Debian DSA-2236-1 : exim4 - command injection
2011-05-13 00:00:00
openSUSE Security Update : exim (openSUSE-SU-2011:0535-1)
2014-06-13 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : exim4 vulnerability (USN-1135-1)
2011-06-13 00:00:00
cvelist
cvelist
CVE-2011-1407
2011-05-16 18:00:00
nvd
nvd
CVE-2011-1407
2011-05-16 18:55:00
debiancve
debiancve
CVE-2011-1407
2011-05-16 18:55:00
cve
cve
CVE-2011-1407
2011-05-16 18:55:00
ubuntucve
ubuntucve
CVE-2011-1407
2011-05-16 00:00:00
prion
prion
Code injection
2011-05-16 18:55:00
fedora
fedora
[SECURITY] Fedora 15 Update: exim-4.76-2.fc15
2011-05-19 04:32:04
[SECURITY] Fedora 14 Update: exim-4.76-1.fc14
2011-05-17 20:56:10
[SECURITY] Fedora 13 Update: exim-4.76-1.fc13
2011-05-17 20:57:49
freebsd
freebsd
Exim -- remote code execution and information disclosure
2011-05-10 00:00:00
securityvulns
securityvulns
gentoo
gentoo
Exim: Multiple vulnerabilities
2014-01-27 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.066
Percentile
93.8%
Related for USN-1135-1