Re: [exim-dev] Remote root vulnerability in Exim

Top Page

Reply to this message
Author: David Woodhouse
To: Stefan Fritsch
CC: exim-dev
Subject: Re: [exim-dev] Remote root vulnerability in Exim
On Sat, 2010-12-11 at 18:12 +0000, Stefan Fritsch wrote:
> > Also, has the FD leak been addressed in an exim bug report at all? It
> > seems like a very sane thing to do also. There's no need for those to be
> > open to a running program.
> Maybe all relevant FDs should be marked with FD_CLOEXEC?

They mostly are already. We neglected to do that on the incoming SMTP
socket, for some reason. Fixed in the patch set I posted for review last