Ubuntu 17.04: USN-3322-1 High: Exim Administrative Privileges Risk

ubuntu

June 19, 2017

Exim could be made to run programs as an administrator.

Summary

Exim could be made to run programs as an administrator.

Software Description:

- exim4: Exim is a mail transport agent

Details:

It was discovered that Exim did not properly deallocate memory when

processing certain command line arguments. A local attacker could use this

in conjunction with another vulnerability to possibly execute arbitrary

code and gain administrative privileges.

Topics Covered

security advisory high ubuntu exim4 administrative privileges

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  exim4-daemon-heavy              4.88-5ubuntu1.1
  exim4-daemon-light              4.88-5ubuntu1.1

Ubuntu 16.10:
  exim4-daemon-heavy              4.87-3ubuntu1.2
  exim4-daemon-light              4.87-3ubuntu1.2

Ubuntu 16.04 LTS:
  exim4-daemon-heavy              4.86.2-2ubuntu2.2
  exim4-daemon-light              4.86.2-2ubuntu2.2

Ubuntu 14.04 LTS:
  exim4-daemon-heavy              4.82-3ubuntu2.3
  exim4-daemon-light              4.82-3ubuntu2.3

In general, a standard system update will make all the necessary changes.