Wednesday, March 7, 2018

Open-source Exim remote attack bug: 400000 servers still vulnerable, patch now

The vulnerability is due to a one-byte heap overflow in Exim's base64 decoding. Chang developed an exploit for it in Debian and Ubuntu that targeted the SMTP daemon of Exim and tricks its memory-management mechanism. "Generally, this bug is harmless because the memory overwritten is usually ...

from Google Alert - vulnerability http://ift.tt/2oOg9vU
via IFTTT

No comments:

Post a Comment