CVE-2010-4344: Exim Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in the stringvformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
Other sources
There is a possible remote root flaw in Exim: http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html
We do not currently know more than is contained in this mail. We will update this bug with further information as it is discovered.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
sa-eximto a version that resolves this vulnerability.Fixed in 4.70
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4344?
CVE-2010-4344 is rated as a high severity vulnerability that allows remote code execution due to a heap-based buffer overflow.
How do I fix CVE-2010-4344?
To fix CVE-2010-4344, upgrade Exim to version 4.70 or later.
What systems are affected by CVE-2010-4344?
CVE-2010-4344 affects various versions of Exim prior to 4.70, including Exim 2.11 through 4.69.
Can CVE-2010-4344 be exploited remotely?
Yes, CVE-2010-4344 can be exploited remotely through an SMTP session with specially crafted MAIL commands.
What type of vulnerability is CVE-2010-4344?
CVE-2010-4344 is classified as a buffer overflow vulnerability.