[exim] Infos: someone posted an none working exploit for ex…

Startseite
Diese Nachricht ist Teil des folgenden Threads:
M+\Der komplette Thread sortiert nach Datum
MMMJeremy Harris am <-
MGraeme Fowler am ->
Nachricht löschen
Nachricht beantworten
Autor: Cyborg
Datum:  
To: exim-users
Neue Treads: [exim] Security reminder on email address characters
Betreff: [exim] Infos: someone posted an none working exploit for exim

More Infos here:

https://www.redteam-pentesting.de/de/advisories/rt-sa-2013-001/-exim-with-dovecot-typical-misconfiguration-leads-to-remote-command-execution


but it's a dovecot problem as it seems. On the other hand "`" is not an
allowed char in an emailaddress..

How about just kicking those connection attempts by default with i.e.
"500 illegal chars used" ?

Marius

Diese Nachricht wurde auf der folgenden Mailing-List gepostet:
Exim-users
Mailing-List-Info | Nachrichten um die Zeit		<-Re: [exim] someone posted an none working exploit for eximRe: [exim] someone posted an none working exploit for exim->
Tahini and Hummus and Cumin Development Archives administriert von cumin AdminsLurker (Version 2.3)