NVD

Id
8350  
Name
CVE-2011-1407  
Description
The DKIM implementation in Exim 4.7x before 4.76 permits matching for DKIM identities to apply to lookup items, instead of only strings, which allows remote attackers to execute arbitrary code or access a filesystem via a crafted identity.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-05-16  
Modified Date
2011-09-06  
Seq
2011-1407  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47834 8350 CVE-2011-1407 DSA-2236  View
47835 8350 CVE-2011-1407 47836  View
47836 8350 CVE-2011-1407 USN-1135-1  View
47837 8350 CVE-2011-1407 [exim-announce] 20110509 Exim 4.76 Release  View
47838 8350 CVE-2011-1407 [exim-announce] 20110512 Exim 4.76 Release: updated impact assessment  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34136 JVNDB-2011-004378 Exim の DKIM 実装における任意のコードを実行させる脆弱性 Exim の DKIM 実装は、文字列以外にルックアップ項目を適用して DKIM の ID の照合を許可するため、任意のコードを実行またはファイルシステムへアクセスされる脆弱性が存在します。 CVE-2011-1407 49314 CVE-2011-1407 8350 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004378.html 2011-05-16 2012-03-27 View