Vulnerability Bulletins |
DSA-4488 exim4 - security update |
|
| Affected software | Debian |
|
Jeremy Harris discovered that Exim, a mail transport agent, does notproperly handle the ${sort } expansion. This flaw can be exploited by aremote attacker to execute programs with root privileges in non-default(and unusual) configurations where ${sort } expansion is used for itemsthat can be controlled by an attacker. More info: https://www.debian.org/security/2019/dsa-4488 |
|