ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70

http://atmail.com/blog/2010/atmail-6204-now-available/

http://bugs.exim.org/show_bug.cgi?id=787

http://git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b

http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html

http://openwall.com/lists/oss-security/2010/12/10/1

http://secunia.com/advisories/40019

http://secunia.com/advisories/42576

http://secunia.com/advisories/42586

http://secunia.com/advisories/42587

http://secunia.com/advisories/42589

http://www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html

http://www.debian.org/security/2010/dsa-2131

http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html

http://www.kb.cert.org/vuls/id/682457

http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format

http://www.openwall.com/lists/oss-security/2021/05/04/7

http://www.osvdb.org/69685

http://www.redhat.com/support/errata/RHSA-2010-0970.html

http://www.securityfocus.com/archive/1/515172/100/0/threaded

http://www.securityfocus.com/bid/45308

http://www.securitytracker.com/id?1024858

http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/

http://www.ubuntu.com/usn/USN-1032-1

http://www.vupen.com/english/advisories/2010/3171

http://www.vupen.com/english/advisories/2010/3172

http://www.vupen.com/english/advisories/2010/3181

http://www.vupen.com/english/advisories/2010/3186

http://www.vupen.com/english/advisories/2010/3204

http://www.vupen.com/english/advisories/2010/3246

http://www.vupen.com/english/advisories/2010/3317

https://bugzilla.redhat.com/show_bug.cgi?id=661756

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST CWE-787

NIST CWE-119

OR
     *cpe:2.3:a:exim:exim:2.10:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:2.11:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:2.12:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.00:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.01:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.02:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.03:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.10:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.11:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.12:*:*:*:*:*:*:*
     *cpe:2.3:a:exim:exim:3.13:*:*:*:*:*:*:*
  

OR
     *cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:* versions up to (excluding) 4.70

OR
     *cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
     *cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*

ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70 No Types Assigned

ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70 Broken Link

http://atmail.com/blog/2010/atmail-6204-now-available/ No Types Assigned

http://atmail.com/blog/2010/atmail-6204-now-available/ Broken Link

http://bugs.exim.org/show_bug.cgi?id=787 Patch

http://bugs.exim.org/show_bug.cgi?id=787 Issue Tracking, Patch

http://git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b Patch

http://git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b Mailing List, Patch

http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html Patch

http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html Mailing List, Patch

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html No Types Assigned

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html Mailing List, Third Party Advisory

http://openwall.com/lists/oss-security/2010/12/10/1 No Types Assigned

http://openwall.com/lists/oss-security/2010/12/10/1 Mailing List, Third Party Advisory

http://secunia.com/advisories/40019 Vendor Advisory

http://secunia.com/advisories/40019 Broken Link, Vendor Advisory

http://secunia.com/advisories/42576 Vendor Advisory

http://secunia.com/advisories/42576 Broken Link, Vendor Advisory

http://secunia.com/advisories/42586 Vendor Advisory

http://secunia.com/advisories/42586 Broken Link, Vendor Advisory

http://secunia.com/advisories/42587 Vendor Advisory

http://secunia.com/advisories/42587 Broken Link, Vendor Advisory

http://secunia.com/advisories/42589 Vendor Advisory

http://secunia.com/advisories/42589 Broken Link, Vendor Advisory

http://www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html No Types Assigned

http://www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html Broken Link

http://www.debian.org/security/2010/dsa-2131 No Types Assigned

http://www.debian.org/security/2010/dsa-2131 Mailing List, Third Party Advisory

http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html No Types Assigned

http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html Exploit, Mailing List

http://www.kb.cert.org/vuls/id/682457 US Government Resource

http://www.kb.cert.org/vuls/id/682457 Third Party Advisory, US Government Resource

http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format No Types Assigned

http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format Third Party Advisory

http://www.openwall.com/lists/oss-security/2021/05/04/7 No Types Assigned

http://www.openwall.com/lists/oss-security/2021/05/04/7 Exploit, Mailing List

http://www.osvdb.org/69685 Exploit, Patch

http://www.osvdb.org/69685 Broken Link, Exploit, Patch

http://www.redhat.com/support/errata/RHSA-2010-0970.html No Types Assigned

http://www.redhat.com/support/errata/RHSA-2010-0970.html Broken Link

http://www.securityfocus.com/archive/1/515172/100/0/threaded No Types Assigned

http://www.securityfocus.com/archive/1/515172/100/0/threaded Broken Link, Third Party Advisory, VDB Entry

http://www.securityfocus.com/bid/45308 No Types Assigned

http://www.securityfocus.com/bid/45308 Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id?1024858 No Types Assigned

http://www.securitytracker.com/id?1024858 Broken Link, Third Party Advisory, VDB Entry

http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ No Types Assigned

http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ Press/Media Coverage

http://www.ubuntu.com/usn/USN-1032-1 No Types Assigned

http://www.ubuntu.com/usn/USN-1032-1 Third Party Advisory

http://www.vupen.com/english/advisories/2010/3171 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3171 Broken Link, Vendor Advisory

http://www.vupen.com/english/advisories/2010/3172 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3172 Broken Link, Vendor Advisory

http://www.vupen.com/english/advisories/2010/3181 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3181 Broken Link, Vendor Advisory

http://www.vupen.com/english/advisories/2010/3186 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3186 Broken Link, Vendor Advisory

http://www.vupen.com/english/advisories/2010/3204 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3204 Broken Link, Vendor Advisory

http://www.vupen.com/english/advisories/2010/3246 Vendor Advisory

http://www.vupen.com/english/advisories/2010/3246 Broken Link, Vendor Advisory

http://www.vupen.com/english/advisories/2010/3317 No Types Assigned

http://www.vupen.com/english/advisories/2010/3317 Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=661756 Exploit

https://bugzilla.redhat.com/show_bug.cgi?id=661756 Exploit, Issue Tracking

CVE-2010-4344 exim: remote code execution flaw

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

Red Hat, Inc. (AV:N/AC:L/Au:N/C:P/I:P/A:P)

https://access.redhat.com/errata/RHSA-2010:0970 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2010-4344 [No Types Assigned]

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

CVE-2010-4344 exim: remote code execution flaw

Red Hat, Inc. (AV:N/AC:L/Au:N/C:P/I:P/A:P)

https://access.redhat.com/errata/RHSA-2010:0970 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2010-4344 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2021/05/04/7 [No Types Assigned]

http://www.securityfocus.com/archive/1/515172/100/0/threaded [No Types Assigned]

http://www.securityfocus.com/archive/1/archive/1/515172/100/0/threaded [No Types Assigned]