CVE-2023-42115 Exim RCE

https://www.zerodayinitiative.com/advisories/ZDI-23-1469/

by kro • 3 years ago

7 3 3 years ago

zerodayinitiative.com

kro• 3 years ago

The site makes it appear Exim never took action on their info to them more than a year ago.

other: https://security-tracker.debian.org/tracker/CVE-2023-42115

oittaa• 3 years ago

And it gets even worse. https://seclists.org/oss-sec/2023/q3/259

After our disclosure timeline was exceeded by many months, we notified the maintainer of our intent to publicly disclose these bugs, at which time we were told, "you do what you do."

pja• 3 years ago

One of these requires having the spa challenge authentication method active, which concerns NTLM passwords. I’m going to guess that approximately zero currently running exim mailservers are using this authentication method. It’s not even mentioned in the default Debian configuration files.

Another is a stack overflow, which will hopefully be caught be the stack-protector hardening on Debian/Ubuntu.

Which leaves the worst of them - the buffer overflow :(

CVE-2023-42115 Exim RCE

Related Stories