USN-6939-1: Exim vulnerability
Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use this issue to bypass a MIME filename extension-blocking protection mechanism and possibly deliver executable attachments to the mailboxes of end users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-6939-1?
The severity of USN-6939-1 is considered high due to the potential for remote code execution through misparsing of MIME header filenames.
How do I fix USN-6939-1?
To fix USN-6939-1, upgrade to the latest patched version of Exim specifically 4.97-4ubuntu4.1 for Ubuntu 24.04 or earlier versions as applicable.
What software does USN-6939-1 affect?
USN-6939-1 affects the Exim mail transfer agent on various versions of Ubuntu, including 20.04, 22.04, and 24.04.
What is the vulnerability identified in USN-6939-1?
USN-6939-1 addresses a vulnerability in Exim where it misparses multiline MIME header filenames, allowing executable file delivery.
Can USN-6939-1 be exploited by an attacker?
Yes, an attacker can exploit USN-6939-1 to bypass filename extension blocking mechanisms and potentially deliver malicious attachments.