3 ms·

More information about the vulnerability (which was fixed over a year ago) can be found here: http://www.exim.org/lurker/message/20101210.164935.385e04d0.en.ht

by dpifke 16y ago

More information about the vulnerability (which was fixed over a year ago) can be found here: http://www.exim.org/lurker/message/20101210.164935.385e04d0.en.html http://www.exim.org/lurker/message/20101210.164935.385e04d0....

tptacek 16y ago
In December, 2008, the Exim team accepted a bug fix for "memory corruption in string_format code", noting "string_format() will happily overwrite beyond allocated memory"; the CVS commit message was "Buffer overrun fix. fixes: bug #787". Apparently, nobody thought this was worth alarming end-users over. http://bugs.exim.org/show_bug.cgi?id=787 http://bugs.exim.org/show_bug.cgi?id=787