Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 511
Alerts This Week
Warning Icon 1 511

Ubuntu 11.04: USN-1135-1 Critical Exim Remote Code Execution Threat

ubuntu
Calendar Grey May 25, 2011
Scroller Ubuntu
Ubuntu Security Alert USN-1135-1 regarding a significant Exim flaw affecting several versions; essential patches are now accessible.
An attacker could send crafted input to Exim and cause it to run programs as the Exim user.

Summary

An attacker could send crafted input to Exim and cause it to run programs

as the Exim user.

Software Description:

- exim4: metapackage to ease Exim MTA (v4) installation

Details:

It was discovered that the Exim daemon did not correctly handle certain

DKIM identities. A remote attacker could send specially crafted email to

run arbitrary code as the Exim user.

Topics%20covered

Topics Covered

security advisory critical remote code execution exim ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  exim4-daemon-custom             4.74-1ubuntu1.2
  exim4-daemon-heavy              4.74-1ubuntu1.2
  exim4-daemon-light              4.74-1ubuntu1.2

Ubuntu 10.10:
  exim4-daemon-custom             4.72-1ubuntu1.3
  exim4-daemon-heavy              4.72-1ubuntu1.3
  exim4-daemon-light              4.72-1ubuntu1.3

Ubuntu 10.04 LTS:
  exim4-daemon-custom             4.71-3ubuntu1.3
  exim4-daemon-heavy              4.71-3ubuntu1.3
  exim4-daemon-light              4.71-3ubuntu1.3

In general, a standard system update will make all the necessary changes.

References

CVE-2011-1407

Severity
critical
Lowest
Low
Medium
High
Critical

May 25, 2011

Topics%20covered

Topics Covered

security advisory critical remote code execution exim ubuntu

Package Information

https://launchpad.net/ubuntu/+source/exim4/4.74-1ubuntu1.2
https://launchpad.net/ubuntu/+source/exim4/4.72-1ubuntu1.3
https://launchpad.net/ubuntu/+source/exim4/4.71-3ubuntu1.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.