CVE-2010-4344

CRITICALCISA KEV

9.8

Description

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published12/14/2010

Last Modified4/21/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorExim

ProductExim

Vulnerability NameExim Heap-Based Buffer Overflow Vulnerability

KEV Date Added2022-03-25

Remediation Due Date2022-04-15

Ransomware UseUnknown

Affected Products

canonical:ubuntu_linuxdebian:debian_linuxexim:eximopensuse:opensuse

Weaknesses (CWE)

CWE-787CWE-787

References

ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70(secalert@redhat.com)

http://atmail.com/blog/2010/atmail-6204-now-available/(secalert@redhat.com)

http://bugs.exim.org/show_bug.cgi?id=787(secalert@redhat.com)

http://git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b(secalert@redhat.com)

http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html(secalert@redhat.com)

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html(secalert@redhat.com)

http://openwall.com/lists/oss-security/2010/12/10/1(secalert@redhat.com)

http://secunia.com/advisories/40019(secalert@redhat.com)

http://secunia.com/advisories/42576(secalert@redhat.com)

http://secunia.com/advisories/42586(secalert@redhat.com)

http://secunia.com/advisories/42587(secalert@redhat.com)

http://secunia.com/advisories/42589(secalert@redhat.com)

http://www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html(secalert@redhat.com)

http://www.debian.org/security/2010/dsa-2131(secalert@redhat.com)

http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html(secalert@redhat.com)

http://www.kb.cert.org/vuls/id/682457(secalert@redhat.com)

http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2021/05/04/7(secalert@redhat.com)

http://www.osvdb.org/69685(secalert@redhat.com)

http://www.redhat.com/support/errata/RHSA-2010-0970.html(secalert@redhat.com)

http://www.securityfocus.com/archive/1/515172/100/0/threaded(secalert@redhat.com)

http://www.securityfocus.com/bid/45308(secalert@redhat.com)

http://www.securitytracker.com/id?1024858(secalert@redhat.com)

http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/(secalert@redhat.com)

http://www.ubuntu.com/usn/USN-1032-1(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3171(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3172(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3181(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3186(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3204(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3246(secalert@redhat.com)

http://www.vupen.com/english/advisories/2010/3317(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=661756(secalert@redhat.com)

ftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70(af854a3a-2127-422b-91ae-364da2661108)

http://atmail.com/blog/2010/atmail-6204-now-available/(af854a3a-2127-422b-91ae-364da2661108)

http://bugs.exim.org/show_bug.cgi?id=787(af854a3a-2127-422b-91ae-364da2661108)

http://git.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6b(af854a3a-2127-422b-91ae-364da2661108)

http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html(af854a3a-2127-422b-91ae-364da2661108)

http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html(af854a3a-2127-422b-91ae-364da2661108)

http://openwall.com/lists/oss-security/2010/12/10/1(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/40019(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42576(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42586(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42587(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42589(af854a3a-2127-422b-91ae-364da2661108)

http://www.cpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2010/dsa-2131(af854a3a-2127-422b-91ae-364da2661108)

http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/682457(af854a3a-2127-422b-91ae-364da2661108)

http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2021/05/04/7(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/69685(af854a3a-2127-422b-91ae-364da2661108)

http://www.redhat.com/support/errata/RHSA-2010-0970.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/515172/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/45308(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1024858(af854a3a-2127-422b-91ae-364da2661108)

http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/(af854a3a-2127-422b-91ae-364da2661108)

http://www.ubuntu.com/usn/USN-1032-1(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3171(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3172(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3181(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3186(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3204(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3246(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/3317(af854a3a-2127-422b-91ae-364da2661108)

https://bugzilla.redhat.com/show_bug.cgi?id=661756(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-4344(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.