CVE-2005-0022

Related Files

IDEF0731.txt

Posted Jan 11, 2005

Site idefense.com

iDEFENSE Security Advisory IDEF0731 - Remote exploitation of a buffer overflow vulnerability in Exim 4.41 may allow execution of arbitrary commands with elevated privileges. Exim is a message transfer agent developed for use on Unix systems. The problem specifically exists in the auth_spa_server function. The function fails to check the length of input to spa_base64_to_bits(), which decodes a Base64-encoded string into a buffer of a fixed length. This string is user-controlled and passed to the program from a remote connection.

tags | advisory, remote, overflow, arbitrary

systems | unix

advisories | CVE-2005-0022

SHA-256 | eaea44300f4db0cc20120ac86a85bd66994a7c19f63becd2b45bbb96582896ce

Download | Favorite | View