Ubuntu update for Exim

1) Heap-based buffer overflow

EUVDB-ID: #VU12128

Risk: High

CVSSv4.0: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2010-4344

CWE-ID: CWE-122 - Heap-based Buffer Overflow

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The weakness exists in the string_vformat function in string.c due to heap-based buffer overflow. A remote attacker can trigger memory corruption and execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing specially crafted headers, leading to improper rejection logging.

Mitigation

Update the affected packages

Ubuntu 9.10:

exim4-daemon-heavy 4.69-11ubuntu4.1

exim4-daemon-custom 4.69-11ubuntu4.1

exim4-daemon-light 4.69-11ubuntu4.1

Ubuntu 8.04 LTS:

exim4-daemon-heavy 4.69-2ubuntu0.2

exim4-daemon-custom 4.69-2ubuntu0.2

exim4-daemon-light 4.69-2ubuntu0.2

Ubuntu 6.06 LTS:

exim4-daemon-heavy 4.60-3ubuntu3.2

exim4-daemon-custom 4.60-3ubuntu3.2

exim4-daemon-light 4.60-3ubuntu3.2

Vulnerable software versions

exim4 (Ubuntu package): 4.69-2ubuntu0 - 4.69-11ubuntu4

CPE2.3

• cpe:2.3:a:canonical:exim4_ubuntu_package:4.69-2ubuntu0:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:exim4_ubuntu_package:4.69-2ubuntu0.1:*:*:*:*:ubuntu:*:*
• cpe:2.3:a:canonical:exim4_ubuntu_package:4.69-2:*:*:*:*:ubuntu:*:*

External links

https://www.ubuntu.com/usn/usn-1032-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.