CVE-2011-1407 | BDVDB-2026-46142 Detail

Description#

The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.ubuntu.com/usn/USN-1135-1
https://lists.exim.org/lurker/message/20110512.102909.8136175a.en.html
http://www.debian.org/security/2011/dsa-2236
https://lists.exim.org/lurker/message/20110509.091632.daed0206.en.html
http://www.securityfocus.com/bid/47836

Exploit#

No public exploit known

History#

Version 12011-05-16Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.