MEDIUM
security flaw
Published Jan 6, 2005
4.6
MEDIUMCVSS 2.0
EPSS 0.72%
Description
Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication.
Affected products
No data.
OR
- ≤ 4.40
- 4.41
- 4.42
No data.
Red Hat Enterprise Linux 4
exim-0:4.43-1.RHEL4.3
Fixed · RHSA-2005:025
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | exim-0:4.43-1.RHEL4.3 | Fixed | RHSA-2005:025 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (12)
- http://ftp6.us.freebsd.org/pub/mail/exim/ChangeLogs/ChangeLog-4.44 x_refsource_CONFIRM
- http://marc.info/?l=bugtraq&m=110824870908614&w=2 mailing-listx_refsource_BUGTRAQ
- http://security.gentoo.org/glsa/glsa-200501-23.xml vendor-advisoryx_refsource_GENTOOVendor Advisory
- http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html mailing-listx_refsource_MLISTPatch
- http://www.idefense.com/application/poi/display?id=178&type=vulnerabilities third-party-advisoryx_refsource_IDEFENSE
- http://www.redhat.com/support/errata/RHSA-2005-025.html vendor-advisoryx_refsource_REDHATPatch
- http://www.securityfocus.com/bid/12188 vdb-entryx_refsource_BID
- https://access.redhat.com/security/cve/CVE-2005-0022 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1617440 Issue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2005-0022
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11293 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2005-0022
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 6, 2005
Updated Aug 7, 2024
Reserved Jan 4, 2005
Link CVE-2005-0022
CISA Vulnrichment
Updated n/a