4 ms·
That's a great writeup. It will be really interesting to see how they achieve remote code execution under those limitations. Also surprising to note that we've
by tonyhb 12y ago
That's a great writeup. It will be really interesting to see how they achieve remote code execution under those limitations.
Also surprising to note that we've been vulnerable since November 2000.
- ChuckMcM 12y agoThey give it away (which I find moderately not nice of them) by saying they used Exim (the mail server) in their POC.
- ryan-c 12y agoThe default exim config seems to not be vulnerable. I checked the configs on two of my systems, one default, and one heavily customized, neither had the helo verification turned on.