Re: [exim] CVE-2019-15846 ..Exim Vulnerability

Top Page
Delete this message
Reply to this message
Author: Heiko Schlittermann
Date:  
To: exim-users
Subject: Re: [exim] CVE-2019-15846 ..Exim Vulnerability
Dmitriy Matrosov via Exim-users <exim-users@???> (Do 12 Sep 2019 14:57:24 CEST):
> >seems, but you have to care about further updates manually).
>
> Does the fix in acl discussed recently make such versions more or less secure?


Yes, as far as we know, you should be on the safe side
with the ACL settings discussed recently.

BTW, today I received a request on selling a working exploit for the
recent CVE. So somebody seems to be interested in using it (or testing,
if I'm serious about security).

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -