An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
25 Jul 2024, 13:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://packetstormsecurity.com/files/162959/Exim-base64d-Buffer-Overflow.html - Exploit, Third Party Advisory, VDB Entry | |
References | () http://www.securityfocus.com/bid/103049 - Broken Link, Third Party Advisory, VDB Entry | |
References | () http://www.securitytracker.com/id/1040461 - Broken Link, Third Party Advisory, VDB Entry | |
References | () https://devco.re/blog/2018/03/06/exim-off-by-one-RCE-exploiting-CVE-2018-6789-en/ - Exploit, Third Party Advisory | |
References | () https://git.exim.org/exim.git/commit/cf3cd306062a08969c41a1cdd32c6855f1abecf1 - Patch | |
References | () https://www.debian.org/security/2018/dsa-4110 - Mailing List, Third Party Advisory | |
CWE | CWE-120 | |
CPE | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* |
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
Information
Published : 2018-02-08 23:29
Updated : 2024-07-25 13:47
NVD link : CVE-2018-6789
Mitre link : CVE-2018-6789
CVE.ORG link : CVE-2018-6789
JSON object : View
Products Affected
canonical
- ubuntu_linux
exim
- exim
debian
- debian_linux
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')