Oval Definition:oval:com.redhat.rhsa:def:20100970
Revision Date:2010-12-10Version:646
Title:RHSA-2010:0970: exim security update (Critical)
Description:Exim is a mail transport agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet.

  • A buffer overflow flaw was discovered in Exim's internal string_vformat() function. A remote attacker could use this flaw to execute arbitrary code on the mail server running Exim. (CVE-2010-4344)

    Note: successful exploitation would allow a remote attacker to execute arbitrary code as root on a Red Hat Enterprise Linux 4 or 5 system that is running the Exim mail server. An exploit for this issue is known to exist.

    For additional information regarding this flaw, along with mitigation advice, please see the Knowledge Base article linked to in the References section of this advisory.

    Users of Exim are advised to update to these erratum packages which contain a backported patch to correct this issue. After installing this update, the Exim daemon will be restarted automatically.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2010-4344
    RHSA-2010:0970
    RHSA-2010:0970-01
    RHSA-2010:0970-01
    Platform(s):Red Hat Enterprise Linux 4
    Red Hat Enterprise Linux 5
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • exim is earlier than 0:4.43-1.RHEL4.5.el4_8.1
  • AND exim is signed with Red Hat redhatrelease2 key
  • exim-doc is earlier than 0:4.43-1.RHEL4.5.el4_8.1
  • AND exim-doc is signed with Red Hat redhatrelease2 key
  • exim-mon is earlier than 0:4.43-1.RHEL4.5.el4_8.1
  • AND exim-mon is signed with Red Hat redhatrelease2 key
  • exim-sa is earlier than 0:4.43-1.RHEL4.5.el4_8.1
  • AND exim-sa is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • exim is earlier than 0:4.63-5.el5_5.2
  • AND exim is signed with Red Hat redhatrelease2 key
  • exim-mon is earlier than 0:4.63-5.el5_5.2
  • AND exim-mon is signed with Red Hat redhatrelease2 key
  • exim-sa is earlier than 0:4.63-5.el5_5.2
  • AND exim-sa is signed with Red Hat redhatrelease2 key
  • BACK