Back to search
CVE-2011-1407
Published: May 16, 2011
Modified: Aug 6, 2024
PUBLISHED
Description
The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
USN-1135-1
vendor-advisory
x_refsource_UBUNTU
[exim-announce] 20110512 Exim 4.76 Release: updated impact assessment
mailing-list
x_refsource_MLIST
DSA-2236
vendor-advisory
x_refsource_DEBIAN
[exim-announce] 20110509 Exim 4.76 Release
mailing-list
x_refsource_MLIST
47836
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now