Exim 'base64d () 'Function Buffer Overflow (CVE-2018-6789)

Exim 'base64d () 'Function Buffer Overflow (CVE-2018-6789)
Exim 'base64d () 'Function Buffer Overflow (CVE-2018-6789)

Release date:
Updated on:

Affected Systems:

Exim <4.90.1

Description:

Bugtraq id: 103049
CVE (CAN) ID: CVE-2018-6789

Exim is the MTA server software.

Exim <4.90.1, SMTP listener base64d function has a security vulnerability, which can cause remote code execution after successful exploitation.

<* Source: Meh Chang
*>

Suggestion:

Vendor patch:

Exim
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://git.exim.org/exim.git/commit/cf3cd306062a08969c41a1cdd32c6855f1abecf1
Https://exim.org/static/doc/security/CVE-2018-6789.txt
Http://openwall.com/lists/oss-security/2018/02/10/2

This article permanently updates link: https://www.bkjia.com/Linux/2018-03/151167.htm