Exim Configuration File Argument Command Line Buffer Overflow Vulnerability
BID:4096
Info
Exim Configuration File Argument Command Line Buffer Overflow Vulnerability
| Bugtraq ID: | 4096 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 13 2002 12:00AM |
| Updated: | Feb 13 2002 12:00AM |
| Credit: | This vulnerability was announced by Ehud Tenenbaum <[email protected]> on February 13, 2002. |
| Vulnerable: |
University of Cambridge Exim 3.34 |
| Not Vulnerable: |
University of Cambridge Exim 3.35 |
Discussion
Exim Configuration File Argument Command Line Buffer Overflow Vulnerability
Exim is a freely available, open source Mail Transport Agent (MTA). It is distributed and maintained by the University of Cambridge. It is available for the Unix and Linux Operating Systems.
It may be possible for local users to take advantage of a buffer overflow in exim. When exim is executed with a combination of flags, one of which is always the configuration file flag (-C), an overflow occurs. Typically, an argument of 32768 bytes must be supplied with the -C flag, and other arguments, such as the full name flag (-F), must be included with an argument of 32700 bytes.
Exim is a freely available, open source Mail Transport Agent (MTA). It is distributed and maintained by the University of Cambridge. It is available for the Unix and Linux Operating Systems.
It may be possible for local users to take advantage of a buffer overflow in exim. When exim is executed with a combination of flags, one of which is always the configuration file flag (-C), an overflow occurs. Typically, an argument of 32768 bytes must be supplied with the -C flag, and other arguments, such as the full name flag (-F), must be included with an argument of 32700 bytes.
Solution / Fix
Exim Configuration File Argument Command Line Buffer Overflow Vulnerability
Solution:
An updated version is available:
University of Cambridge Exim 3.34
Solution:
An updated version is available:
University of Cambridge Exim 3.34
-
University of Cambridge exim-3.35.tar.bz2
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim3/exim-3.35.tar.bz 2 -
University of Cambridge exim-3.35.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim3/exim-3.35.tar.gz