Remote Exim Exploit In the Wild

Posted by kdawson on Friday December 10, 2010 @04:11AM from the be-careful-out-there dept.

An anonymous reader sends word of a remote exploit in the wild against the Exim mail agent. The news comes on the exim mailing list, where a user posted that he had his exim install hacked via remote exploit giving the attacker the privilege of the mailnull user, which can lead to other possible attacks. A note up at the Internet Storm Center reminds exim users how to set up to run in unprivileged mode, and a commenter includes recompile instructions for Debian exim for added safety. The security press hasn't picked up on this story so far.

1 of 90 comments (clear)

Min score:

Reason:

Sort:

Exim - POP3/IMAP client for Linux? by clone52431 · 2010-12-10 04:38 · Score: -1, Flamebait

It wouldn’t have killed them to just tell me what it is. I can only assume.

--
Distributed Denial of APK: It takes 15 seconds to reply to him anonymously, but wastes tons of his time if we all do it.