Secunia

Georgi Guninski has reported two vulnerabilities in exim, which potentially can be exploited by malicious people to compromise a vulnerable system.

1) A boundary error within the verification of sender addresses can be exploited to cause a buffer overflow. Successful exploitation allows execution of arbitrary code, but requires that the setting "sender_verify" is set to "true" (not default setting) in the configuration file.

This vulnerability has been reported in version 3.35 and may also affect other versions. Version 4.32 is reportedly not vulnerable.

2) A boundary error within a routine for header syntax checking can be exploited to cause a buffer overflow. Successful exploitation may potentially allow execution of arbitrary code but requires that "headers_check_syntax" / "require verify = header_syntax" is enabled (not default setting) in the configuration file.

This vulnerability has been reported in versions 3.35 and 4.32. Other versions are likely also affected.

Solution
Upgrade to version 4.32 and disable header syntax checking in "exim.conf" if enabled.

Provided and/or discovered by
Georgi Guninski

Changelog
Further details available in Customer Area

Original Advisory
http://www.guninski.com/exim1.html

Deep Links
Links available in Customer Area