Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the dkim_exim_query_dns_txt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and acl_smtp_connect and acl_smtp_rcpt are not set to "warn control = dkim_disable_verify," allows remote attackers to execute arbitrary code via an email from a malicious DNS server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Exim DKIM DNS解码拒绝服务漏洞
Vulnerability Description
Exim是英国剑桥大学开发的一个运行于Unix系统中的开源消息传送代理（MTA），它主要负责邮件的路由、转发和投递。 Exim 4.70至4.80版本中存在漏洞，可被恶意攻击者利用从而控制受影响系统。该漏洞源于处理DNS记录时，‘dkim_exim_query_dns_txt()’函数(src/dkim.c)中存在错误。通过由自己控制的DNS域名下发送特制邮件，攻击者可利用该漏洞触发基于堆的缓冲区溢出。成功的利用可执行任意代码，但需要将程序设置为支持DKIM且‘acl_smtp_connect’或‘acl
CVSS Information
N/A
Vulnerability Type
N/A