Oval Definition:oval:org.mitre.oval:def:12805
Revision Date:2014-06-23Version:20
Title:DSA-2236-1 exim4 -- command injection
Description:It was discovered that Exim, Debian's default mail transfer agent, is vulnerable to command injection attacks in its DKIM processing code, leading to arbitrary code execution. The default configuration supplied by Debian does not expose this vulnerability. The oldstable distribution is not affected by this problem.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2011-1407
DSA-2236-1
Platform(s):Debian GNU/kFreeBSD 6.0
Debian GNU/Linux 6.0
Product(s):exim4
Definition Synopsis
  • Debian 6.0 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND Installed architecture is all
  • AND exim4 DPKG is earlier than 4.72-6+squeeze2
  • BACK