tocsin

Debian/exim4: medium 5.3

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM a

Action: Upgrade exim4 to 4.97-3 or later.

Affected

introducedfixedlast affected
04.97-3-

Fixed versions

4.97-3

Sources

published · modified · JSON