CVE-2005-0021
CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/756unverifiedexploitdbwww.exploit-db.com/exploits/1009unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44http://security.gentoo.org/glsa/glsa-200501-23.xmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10347http://www.debian.org/security/2005/dsa-635http://www.debian.org/security/2005/dsa-637http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.htmlhttp://www.idefense.com/application/poi/display?id=179&type=vulnerabilitieshttp://www.idefense.com/application/poi/display?id=183&type=vulnerabilitieshttp://www.kb.cert.org/vuls/id/132992http://www.redhat.com/support/errata/RHSA-2005-025.html