drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberlauf in exim
Name: |
Pufferüberlauf in exim |
|
ID: |
USN-1032-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 6.06, Ubuntu 8.04 LTS, Ubuntu 9.10 |
|
Datum: |
Sa, 11. Dezember 2010, 10:35 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4344 |
|
Applikationen: |
exim |
|
Originalnachricht |
--===============6179006864713463738== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="cvVnyQ+4j833TQvp" Content-Disposition: inline
--cvVnyQ+4j833TQvp Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
=========================================================== Ubuntu Security Notice USN-1032-1 December 11, 2010 exim4 vulnerability CVE-2010-4344 ===========================================================
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS Ubuntu 8.04 LTS Ubuntu 9.10
This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu.
The problem can be corrected by upgrading your system to the following package versions:
Ubuntu 6.06 LTS: exim4-daemon-custom 4.60-3ubuntu3.2 exim4-daemon-heavy 4.60-3ubuntu3.2 exim4-daemon-light 4.60-3ubuntu3.2
Ubuntu 8.04 LTS: exim4-daemon-custom 4.69-2ubuntu0.2 exim4-daemon-heavy 4.69-2ubuntu0.2 exim4-daemon-light 4.69-2ubuntu0.2
Ubuntu 9.10: exim4-daemon-custom 4.69-11ubuntu4.1 exim4-daemon-heavy 4.69-11ubuntu4.1 exim4-daemon-light 4.69-11ubuntu4.1
In general, a standard system update will make all the necessary changes.
Details follow:
Sergey Kononenko and Eugene Bujak discovered that Exim did not correctly truncate string expansions. A remote attacker could send specially crafted email traffic to run arbitrary code as the Exim user, which could also lead to root privileges.
Updated packages for Ubuntu 6.06 LTS:
Source archives:
exim4_4.60-3ubuntu3.2.diff.gz Size/MD5: 326950 65e62a09e080c821e398a63cf92a6d1f exim4_4.60-3ubuntu3.2.dsc Size/MD5: 1710 56df0b8c8d370e21120658155de9c3fa http://security.ubuntu.com/ubuntu/pool/main/e/exim4/exim4_4.60.orig.tar.gz Size/MD5: 2022260 5f8e5834c648ac9a62bb8ab6ad2a6227
Architecture independent packages:
exim4-config_4.60-3ubuntu3.2_all.deb Size/MD5: 263080 359ce4b2bd41c72718c137e465342696 exim4_4.60-3ubuntu3.2_all.deb Size/MD5: 1580 feabe1136ff1d77db3bf15a3d0e95d23
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
exim4-base_4.60-3ubuntu3.2_amd64.deb Size/MD5: 876940 341ab7347734de16c49182757d15e209 exim4-daemon-heavy_4.60-3ubuntu3.2_amd64.deb Size/MD5: 468624 23925ea701e015f23b5252e6023241a8 exim4-daemon-light_4.60-3ubuntu3.2_amd64.deb Size/MD5: 414586 16f48b776d5757043f167239fe931fe0 eximon4_4.60-3ubuntu3.2_amd64.deb Size/MD5: 86502 2dd6d4b0fe218b3e6416ae03e13540f4
i386 architecture (x86 compatible Intel/AMD):
exim4-base_4.60-3ubuntu3.2_i386.deb Size/MD5: 873970 d7227fdecda4f57c4f0a46895f0047fe exim4-daemon-heavy_4.60-3ubuntu3.2_i386.deb Size/MD5: 423706 8a7293ab75f5ffff0029a7e60294d6e8 exim4-daemon-light_4.60-3ubuntu3.2_i386.deb Size/MD5: 374388 b0cbe933f4adc32b6b0228d3819f53cf eximon4_4.60-3ubuntu3.2_i386.deb Size/MD5: 81898 d1151fdb573847abf6ef7a2c476dec46
powerpc architecture (Apple Macintosh G3/G4/G5):
exim4-base_4.60-3ubuntu3.2_powerpc.deb Size/MD5: 883758 1973a2fe4863ed692b22d41a97d4d3f7 exim4-daemon-heavy_4.60-3ubuntu3.2_powerpc.deb Size/MD5: 469898 c81c330d96ce8f8e9fbb3611ddae9451 exim4-daemon-light_4.60-3ubuntu3.2_powerpc.deb Size/MD5: 416324 1adda1365428df3dda3ad2eca06a5b0d eximon4_4.60-3ubuntu3.2_powerpc.deb Size/MD5: 88496 3ddbbdfcad0dc9c4ea0cc1257a66f806
sparc architecture (Sun SPARC/UltraSPARC):
exim4-base_4.60-3ubuntu3.2_sparc.deb Size/MD5: 874312 87893cdf1323bc6271da745379efeb63 exim4-daemon-heavy_4.60-3ubuntu3.2_sparc.deb Size/MD5: 444438 8d88c67448778b105336151ffcf9b9cc exim4-daemon-light_4.60-3ubuntu3.2_sparc.deb Size/MD5: 394234 8ea9e87dbb5bc7b8e34b7e39be3f14dd eximon4_4.60-3ubuntu3.2_sparc.deb Size/MD5: 83748 6b14d9e0a764114fdddd73e9bf518acc
Updated packages for Ubuntu 8.04 LTS:
Source archives:
exim4_4.69-2ubuntu0.2.diff.gz Size/MD5: 542324 684652aca4ddc876130dc1e747abe639 exim4_4.69-2ubuntu0.2.dsc Size/MD5: 1946 b6f0b4b89968ea9f8baaf398b3c40305 http://security.ubuntu.com/ubuntu/pool/main/e/exim4/exim4_4.69.orig.tar.gz Size/MD5: 1659309 f0176239d54546526f519e266182c019
Architecture independent packages:
exim4-config_4.69-2ubuntu0.2_all.deb Size/MD5: 310444 b27c6deeab84c0d9d1834975de452079 exim4_4.69-2ubuntu0.2_all.deb Size/MD5: 6356 e3e360d03367ada5058186fda42bf412
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
exim4-base_4.69-2ubuntu0.2_amd64.deb Size/MD5: 985396 646127f389dc10c56f9ce9b76288ea0e exim4-daemon-heavy-dbg_4.69-2ubuntu0.2_amd64.deb Size/MD5: 787748 5bf7ad817c0b96661433613c65dc2541 exim4-daemon-heavy_4.69-2ubuntu0.2_amd64.deb Size/MD5: 496550 e309c2170877949d51f3c9da12d1606b exim4-daemon-light-dbg_4.69-2ubuntu0.2_amd64.deb Size/MD5: 701732 ace3c153ef2e6c00e578458c6667bd98 exim4-daemon-light_4.69-2ubuntu0.2_amd64.deb Size/MD5: 442708 c2e54c2f539e85d48b40123540aec66c exim4-dbg_4.69-2ubuntu0.2_amd64.deb Size/MD5: 267568 4ab6961efc6909ecc21a0dc11524e355 exim4-dev_4.69-2ubuntu0.2_amd64.deb Size/MD5: 68336 0f916ca937aa199124a37e5dcbf901d3 eximon4_4.69-2ubuntu0.2_amd64.deb Size/MD5: 100648 30dd3dcc34805edbeb843a2e1a0419e4
i386 architecture (x86 compatible Intel/AMD):
exim4-base_4.69-2ubuntu0.2_i386.deb Size/MD5: 981574 c6bdac374c384e75709ddbc4584c78a0 exim4-daemon-heavy-dbg_4.69-2ubuntu0.2_i386.deb Size/MD5: 748140 89cfe95a5d9a006a60a4e0c93a36f176 exim4-daemon-heavy_4.69-2ubuntu0.2_i386.deb Size/MD5: 467732 d3d1784cfb941570e62b348cbf18c634 exim4-daemon-light-dbg_4.69-2ubuntu0.2_i386.deb Size/MD5: 667830 2ad120163463491c374bc4732cf30fa3 exim4-daemon-light_4.69-2ubuntu0.2_i386.deb Size/MD5: 416776 54e80325909177eff906dd468cc2ab34 exim4-dbg_4.69-2ubuntu0.2_i386.deb Size/MD5: 260684 9ec594f594d7de456edb7883a4db11c0 exim4-dev_4.69-2ubuntu0.2_i386.deb Size/MD5: 68340 bb7173daff16f19ccc5a50359f74cfaa eximon4_4.69-2ubuntu0.2_i386.deb Size/MD5: 96086 127416ada041e7074a153e856cafb938
lpia architecture (Low Power Intel Architecture):
exim4-base_4.69-2ubuntu0.2_lpia.deb Size/MD5: 982010 c14a5270224544ce1b964469607002a0 exim4-daemon-heavy-dbg_4.69-2ubuntu0.2_lpia.deb Size/MD5: 762118 3ac2e6594a46175328ea3a0a41454f3a exim4-daemon-heavy_4.69-2ubuntu0.2_lpia.deb Size/MD5: 465198 b68b7099bbd223a28e2b244629ed5ceb exim4-daemon-light-dbg_4.69-2ubuntu0.2_lpia.deb Size/MD5: 678182 0bcb9cbb5eca98a174b547d1b815770c exim4-daemon-light_4.69-2ubuntu0.2_lpia.deb Size/MD5: 414510 c4d1073ae10ac0f94a74aa49bfcc9e98 exim4-dbg_4.69-2ubuntu0.2_lpia.deb Size/MD5: 262380 9898befd0cc82b2dcbc196f9682ffb2a exim4-dev_4.69-2ubuntu0.2_lpia.deb Size/MD5: 68352 028371d72c5e06a549c394870ef67b89 http://ports.ubuntu.com/pool/main/e/exim4/eximon4_4.69-2ubuntu0.2_lpia.deb Size/MD5: 96048 799182419e8721e485485747541a85f4
powerpc architecture (Apple Macintosh G3/G4/G5):
exim4-base_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 985382 48ddd029fda6f3a39640ce0a45b82028 exim4-daemon-heavy-dbg_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 786138 0876d0748141809d4ff6429457165563 exim4-daemon-heavy_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 513280 2db5199ab6423edebdba511551db8b62 exim4-daemon-light-dbg_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 703960 5cc4faeaa585d8941cf6214318bd5b17 exim4-daemon-light_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 455878 50c08967a3ec824e8645e0a35541456a exim4-dbg_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 275044 360d13462ca6e826ac875ee22b1a27e1 exim4-dev_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 68350 d237b34a403174d6d6d934f2162dfc6d eximon4_4.69-2ubuntu0.2_powerpc.deb Size/MD5: 104764 ac28a25431d743ed4ea171e7d1ce99c2
sparc architecture (Sun SPARC/UltraSPARC):
exim4-base_4.69-2ubuntu0.2_sparc.deb Size/MD5: 982370 3fb20f69090a7709195266af3a15fe2e exim4-daemon-heavy-dbg_4.69-2ubuntu0.2_sparc.deb Size/MD5: 741860 f672767f502724a3f494f175277a2b60 exim4-daemon-heavy_4.69-2ubuntu0.2_sparc.deb Size/MD5: 479786 761c69d7c6464768432b826f0a064be3 exim4-daemon-light-dbg_4.69-2ubuntu0.2_sparc.deb Size/MD5: 662310 04e260bc4f8b1f247b9fd215b990eb17 exim4-daemon-light_4.69-2ubuntu0.2_sparc.deb Size/MD5: 426994 b72924c18424294579f5f57fa8c2013f exim4-dbg_4.69-2ubuntu0.2_sparc.deb Size/MD5: 260010 3b3feefc54a37292e2e1a50b90901396 exim4-dev_4.69-2ubuntu0.2_sparc.deb Size/MD5: 68346 7fc9cea90f650e451123edf893d67d95 http://ports.ubuntu.com/pool/main/e/exim4/eximon4_4.69-2ubuntu0.2_sparc.deb Size/MD5: 97782 6d1b8efca2ba6ddacf715d3681b78373
Updated packages for Ubuntu 9.10:
Source archives:
exim4_4.69-11ubuntu4.1.diff.gz Size/MD5: 552585 11dba71d2f51a531dfbe030149ac2616 exim4_4.69-11ubuntu4.1.dsc Size/MD5: 2371 e11ceeebee781339679135bce2abe397 http://security.ubuntu.com/ubuntu/pool/main/e/exim4/exim4_4.69.orig.tar.gz Size/MD5: 1659309 f0176239d54546526f519e266182c019
Architecture independent packages:
exim4-config_4.69-11ubuntu4.1_all.deb Size/MD5: 371854 52414ba2baf1c4a04eae981277055955 exim4_4.69-11ubuntu4.1_all.deb Size/MD5: 7950 3dc329a42c7277a881e11dc67d6ec26a
amd64 architecture (Athlon64, Opteron, EM64T Xeon):
exim4-base_4.69-11ubuntu4.1_amd64.deb Size/MD5: 997338 60d6d9230266bef5252032836d759efe exim4-daemon-heavy-dbg_4.69-11ubuntu4.1_amd64.deb Size/MD5: 838022 6caa8c44754e391ce183b3bacdbd9498 exim4-daemon-heavy_4.69-11ubuntu4.1_amd64.deb Size/MD5: 544194 3c261ca58188fd58fa604a0cdaadcfa9 exim4-daemon-light-dbg_4.69-11ubuntu4.1_amd64.deb Size/MD5: 742158 8bdae915a7843290a9c18f37e11f753d exim4-daemon-light_4.69-11ubuntu4.1_amd64.deb Size/MD5: 488240 d7e86dd8164f4e02e4c1744e53600ebf exim4-dbg_4.69-11ubuntu4.1_amd64.deb Size/MD5: 280102 f561098ed480b00632f8ae25bf2e95f2 exim4-dev_4.69-11ubuntu4.1_amd64.deb Size/MD5: 72056 65d2f1b2b7aca4685b485bee6e8e40ab eximon4_4.69-11ubuntu4.1_amd64.deb Size/MD5: 107892 f4c6f0de550ba029169f02bc66f2d602
i386 architecture (x86 compatible Intel/AMD):
exim4-base_4.69-11ubuntu4.1_i386.deb Size/MD5: 994680 4a7cf2144d4d02286cec9575c929e136 exim4-daemon-heavy-dbg_4.69-11ubuntu4.1_i386.deb Size/MD5: 798296 946a4c06e065e7e4f6bc340d03426719 exim4-daemon-heavy_4.69-11ubuntu4.1_i386.deb Size/MD5: 514902 11e0fbb495e2ad630e548e2a3e0d5f07 exim4-daemon-light-dbg_4.69-11ubuntu4.1_i386.deb Size/MD5: 707224 ecb77bc0a1a59ab28aaa46492ee5dc00 exim4-daemon-light_4.69-11ubuntu4.1_i386.deb Size/MD5: 462410 f0ff9f7d0332bc49f50982a1ad7f8d78 exim4-dbg_4.69-11ubuntu4.1_i386.deb Size/MD5: 274384 d682d6b5f5889af154176df6c120c160 exim4-dev_4.69-11ubuntu4.1_i386.deb Size/MD5: 72042 96ad9118dffa077ac2dd4fd82cbefecc eximon4_4.69-11ubuntu4.1_i386.deb Size/MD5: 103934 c99c724eead0d85e92a43706f858543c
armel architecture (ARM Architecture):
exim4-base_4.69-11ubuntu4.1_armel.deb Size/MD5: 998324 1f6d71876f8f663ebe464a94873fe9e1 exim4-daemon-heavy-dbg_4.69-11ubuntu4.1_armel.deb Size/MD5: 800678 9d213fc523dad77ed32b116091247124 exim4-daemon-heavy_4.69-11ubuntu4.1_armel.deb Size/MD5: 492850 141ddaaa9408c6966545954f3fd711b2 exim4-daemon-light-dbg_4.69-11ubuntu4.1_armel.deb Size/MD5: 708006 eeb57c0432e924fde0475aa33be7c16a exim4-daemon-light_4.69-11ubuntu4.1_armel.deb Size/MD5: 442464 901d8991e58bb7eb752e1ddc002a36c0 exim4-dbg_4.69-11ubuntu4.1_armel.deb Size/MD5: 276866 479fb0f71294d8edf96c1ee112b71a7b exim4-dev_4.69-11ubuntu4.1_armel.deb Size/MD5: 72038 a57070daa19f52edf185b358c1acb9cf eximon4_4.69-11ubuntu4.1_armel.deb Size/MD5: 101966 4e01888c6a9ed05aed78f404e5c2c2e5
lpia architecture (Low Power Intel Architecture):
exim4-base_4.69-11ubuntu4.1_lpia.deb Size/MD5: 994470 2ffebb741e1f8b60fe4f2591faf69ba5 exim4-daemon-heavy-dbg_4.69-11ubuntu4.1_lpia.deb Size/MD5: 809464 bad54d53cd66ff492e617e6a5fe747b4 exim4-daemon-heavy_4.69-11ubuntu4.1_lpia.deb Size/MD5: 513420 944dfbf91d1d47570cf4beac113dbf1e exim4-daemon-light-dbg_4.69-11ubuntu4.1_lpia.deb Size/MD5: 718372 24ae980ea40a6cce6c3bc6e5cef59cc5 exim4-daemon-light_4.69-11ubuntu4.1_lpia.deb Size/MD5: 460068 b9824d586d4a1dbf922301ee5143830a exim4-dbg_4.69-11ubuntu4.1_lpia.deb Size/MD5: 275540 99bcc98393cfd51ea586cd4e6005600a exim4-dev_4.69-11ubuntu4.1_lpia.deb Size/MD5: 72054 b79b154eb510cfeb1e8a716b2c00fad2 http://ports.ubuntu.com/pool/main/e/exim4/eximon4_4.69-11ubuntu4.1_lpia.deb Size/MD5: 103444 d4c9bcd0086a036a112aaee566b97c99
powerpc architecture (Apple Macintosh G3/G4/G5):
exim4-base_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 997714 691a23f30a287c89b93e867e77ebcc38 exim4-daemon-heavy-dbg_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 860134 beb27c57066d52542399f37d6199d2d0 exim4-daemon-heavy_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 559436 cad28e7e802bdf7e4765ccb069cbb934 exim4-daemon-light-dbg_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 765252 46cc4f2a70730c889296ee8b2200d900 exim4-daemon-light_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 500176 ca794eea0dc57873e58f3fe04d4d063a exim4-dbg_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 286262 ff8331c62147bcfa31480eca018cb268 exim4-dev_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 72058 c71d83c209896a52e214e876aa976345 eximon4_4.69-11ubuntu4.1_powerpc.deb Size/MD5: 108948 02416f3e1f7e124a41bf8c5d7dd5b9e6
sparc architecture (Sun SPARC/UltraSPARC):
exim4-base_4.69-11ubuntu4.1_sparc.deb Size/MD5: 996654 8aed2bd56548d55bd4c0f66e3cefa235 exim4-daemon-heavy-dbg_4.69-11ubuntu4.1_sparc.deb Size/MD5: 802528 60a2db91419181f6ebc41605d78b2170 exim4-daemon-heavy_4.69-11ubuntu4.1_sparc.deb Size/MD5: 540910 4be026ab559a35d48d36489883bfd293 exim4-daemon-light-dbg_4.69-11ubuntu4.1_sparc.deb Size/MD5: 713966 929872a08329c71a46b99645d3c3d941 exim4-daemon-light_4.69-11ubuntu4.1_sparc.deb Size/MD5: 485902 b57f4247f29aee0ca1ee4847cb091c43 exim4-dbg_4.69-11ubuntu4.1_sparc.deb Size/MD5: 274414 44e8af10162fdb0ce7973e07f7e661e5 exim4-dev_4.69-11ubuntu4.1_sparc.deb Size/MD5: 72054 c332909031c776ebc9a7d21a23770fe6 eximon4_4.69-11ubuntu4.1_sparc.deb Size/MD5: 105590 a5d4bc7bfeadd3206fd2f61b7f38a974
--cvVnyQ+4j833TQvp Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Kees Cook <kees@outflux.net>
iQIcBAEBCgAGBQJNAspxAAoJEIly9N/cbcAmi78QAIMCfqG5wCoITiZe/9lMixjy 6VpgV/VNuHUVeLsCe16TZHd1yrZtSnjw34Enul99toNbFtvdR5sKAD7C0pBWZk21 vgtLNmGQjWyeY5h8eoePWlrzOahfSz7DTlI+P0OSx7V2yv1k+MYxBQGpPUiOAKO5 M2ObNHX1Rav+nYvegnkzwI9CTXu5KVzSrWRg1t6UXi6UgovrTV9Du5RCLEx7xSGR 0C5eP/8DJJ15mpjex8oLZcnB6D9Xzqy+IaRrdP3liUlxKV2TKOXq3fKMUxzsvRxq JIz6DEuBlQWgfsC3LeVTRtCOQvn1vwHq0Bvxqq/+04AJ7YAsWx8onrSftUyzrqZV TntuIFSCb8t+wvbtlnKZKWCbf5qOYebBzvoIgD88V8+W8qYvw2AWVJslLeTbDTrl 19jWB8BmJhY/csDh/AbDAjIxa5cjlM3KEriRkEvWxQTFOrlp/sAHoJWMA8JOA3mo Z5OCeMI4Fz34NbXqcZm+Z9X4/rSHoJquDYgpVsvIReQ7rgyrXjf667YON3eR6M2R U+aUfDMiXa91oVWdMq6YfwMJddQi8d2a8auH2PbIh7UPAeYaVSRIX/sDeep5/Vhi 4O2+/G/45EHuQvRslocei9ZYZeItTDdmaEJI90cAQWYdeXwpSDExsdk8zXe7Bniw ewMnriS+U0PH2iVfYg+8 =WiHh -----END PGP SIGNATURE-----
--cvVnyQ+4j833TQvp--
--===============6179006864713463738== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============6179006864713463738==--
|
|
|
|