Поиск уязвимостей
Количество 12
Количество 12
GHSA-h5j4-2q8w-q3q4
Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-17433.
CVE-2023-42114
Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433.
CVE-2023-42114
Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433.
CVE-2023-42114
Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433.
CVE-2023-42114
Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerab ...
BDU:2023-06277
Уязвимость реализации протокола NTLM (New Technology LAN Manager) почтового сервера Exim, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ROS-20240730-09
Уязвимость exim
openSUSE-SU-2023:0293-1
Security update for exim
openSUSE-SU-2024:0007-1
Security update for exim
ROS-20240404-17
Множественные уязвимости exim
ALT-PU-2023-7644
ALT-PU-2023-7644: package `exim` update to version 4.97-alt1
ALT-PU-2026-11576
ALT-PU-2026-11576: package `exim` update to version 4.99.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-h5j4-2q8w-q3q4 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. Was ZDI-CAN-17433. | CVSS3: 3.7 | 27% Средний | больше 2 лет назад |
 | CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433. | CVSS3: 5.3 | 27% Средний | больше 2 лет назад |
 | CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433. | CVSS3: 3.7 | 27% Средний | около 3 лет назад |
 | CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NTLM challenge requests. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to disclose information in the context of the service account. . Was ZDI-CAN-17433. | CVSS3: 5.3 | 27% Средний | больше 2 лет назад |
| CVE-2023-42114 Exim NTLM Challenge Out-Of-Bounds Read Information Disclosure Vulnerab ... | CVSS3: 5.3 | 27% Средний | больше 2 лет назад |
 | BDU:2023-06277 Уязвимость реализации протокола NTLM (New Technology LAN Manager) почтового сервера Exim, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 3.7 | 27% Средний | больше 4 лет назад |
 | ROS-20240730-09 Уязвимость exim | CVSS3: 3.7 | 27% Средний | больше 2 лет назад |
 | openSUSE-SU-2023:0293-1 Security update for exim | около 3 лет назад | ||
| openSUSE-SU-2024:0007-1 Security update for exim | почти 3 года назад | ||
| ROS-20240404-17 Множественные уязвимости exim | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2023-7644 ALT-PU-2023-7644: package `exim` update to version 4.97-alt1 | CVSS3: 9.8 | почти 3 года назад | |
| ALT-PU-2026-11576 ALT-PU-2026-11576: package `exim` update to version 4.99.3-alt1 | CVSS3: 9.8 | 4 месяца назад |
Уязвимостей на страницу