CVE-2023-51766

Опубликовано: 24 дек. 2023

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports . but some other popular e-mail servers do not.

Ссылки

http://www.openwall.com/lists/oss-security/2023/12/24/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/12/25/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/12/29/2
Mailing List
Mitigation
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/01/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/01/2
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/01/01/3
Mailing List
Third Party Advisory
https://bugs.exim.org/show_bug.cgi?id=3063
Issue Tracking
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255852
Issue Tracking
Third Party Advisory
https://exim.org/static/doc/security/CVE-2023-51766.txt
Broken Link
https://fahrplan.events.ccc.de/congress/2023/fahrplan/events/11782.html
Technical Description
https://git.exim.org/exim.git/commit/5bb786d5ad568a88d50d15452aacc8404047e5ca
Patch
https://git.exim.org/exim.git/commit/cf1376206284f2a4f11e32d931d4aade34c206c5
Patch
https://github.com/Exim/exim/blob/master/doc/doc-txt/cve-2023-51766
Mitigation
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00002.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORN7OKEQPPBKUHYRQ6LR5PSNBQVDHAWB/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPDWHJPABVJCXDSNELSSVTIVAJU2MDUQ/
Mailing List
Third Party Advisory
https://lwn.net/Articles/956533/
Third Party Advisory
https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/
Technical Description
Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/12/23/2
Issue Tracking
Mailing List
Third Party Advisory
https://www.youtube.com/watch?v=V8KPV96g1To
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*

Версия до 4.97.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03209

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345

Связанные уязвимости

CVE-2023-51766

CVSS3: 5.3

ubuntu

больше 1 года назад

CVE-2023-51766

CVSS3: 5.3

debian

больше 1 года назад

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKIN ...

ROS-20240408-20

CVSS3: 5.3

redos

около 1 года назад

Уязвимость exim

GHSA-w6ww-869j-cgm6

CVSS3: 4.3

github

больше 1 года назад

Exim through 4.97 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages that appear to originate from the Exim server, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

BDU:2024-00108

CVSS3: 6.5

fstec

больше 1 года назад

Уязвимость реализации протокола SMTP почтового сервера Exim, позволяющая нарушителю обойти политику безопасности SPF (Sender Policy Framework) и отправить скрытый HTTP-запрос (атака типа HTTP Request Smuggling)

EPSS

Процентиль: 86%

0.03209

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-345