CVE-2023-42115 Exim RCE

zerodayinitiative.com

7 pointskro3 comments

One of these requires having the spa challenge authentication method active, which concerns NTLM passwords. I’m going to guess that approximately zero currently running exim mailservers are using this authentication method. It’s not even mentioned in the default Debian configuration files.

Another is a stack overflow, which will hopefully be caught be the stack-protector hardening on Debian/Ubuntu.

Which leaves the worst of them - the buffer overflow :(

The site makes it appear Exim never took action on their info to them more than a year ago.

other: https://security-tracker.debian.org/tracker/CVE-2023-42115

And it gets even worse. https://seclists.org/oss-sec/2023/q3/259

> After our disclosure timeline was exceeded by many months, we notified the maintainer of our intent to publicly disclose these bugs, at which time we were told, "you do what you do."

Reply on news.ycombinator.com