Re: [exim] Exim 4.84_2 #1 : WARNING: purging the environment…

Top Page
This message is part of the following thread:
M\the complete thread tree sorted by date
MMJeremy Harris at <-
MMAlways Learning at ->
Delete this message
Reply to this message
Author: Chris Siebenmann
Date:  
To: Always Learning
CC: Exim, cks
Subject: Re: [exim] Exim 4.84_2 #1 : WARNING: purging the environment.
> Thank you very much for your helpful summary. Currently I do not
> understand how someone can use Exim to execute malicious Perl scripts
> unless Exim has a facility to execute Perl scripts, for example
> [...]

There's a full-disclosure mailing list message about the bug; it
provides details of how this is exploitable provided only that you have
perl_startup defined in your Exim configuration: 

    https://marc.info/?l=full-disclosure&m=145781499028909&w=2


    - cks


This message was posted to the following mailing lists:
Exim-users
Mailing List Info | Nearby Messages		<-Re: [exim] Exim 4.84_2 #1 : WARNING: purging the environment.Re: [exim] Exim 4.84_2 #1 : WARNING: purging the environment.->
Tahini and Hummus and Cumin Development Archives administrated by cumin AdminsLurker (version 2.3)