NVD

Id
8651  
Name
CVE-2011-1764  
Description
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim before 4.76 might allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstrated by an identity field containing a % (percent) character.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-10-04  
Modified Date
2014-02-20  
Seq
2011-1764  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
49928 8651 CVE-2011-1764 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624670  View
49929 8651 CVE-2011-1764 http://bugs.exim.org/show_bug.cgi?id=1106  View
49930 8651 CVE-2011-1764 http://git.exim.org/exim.git/commit/337e3505b0e6cd4309db6bf6062b33fa56e06cf8  View
49931 8651 CVE-2011-1764 SUSE-SR:2011:009  View
49932 8651 CVE-2011-1764 DSA-2232  View
49933 8651 CVE-2011-1764 https://bugzilla.redhat.com/show_bug.cgi?id=702474  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32108 JVNDB-2011-002348 Exim の src/dkim.c 内の dkim_exim_verify_finish 関数における任意のコードを実行される脆弱性 Exim の src/dkim.c 内の dkim_exim_verify_finish 関数には、任意のコードを実行される、またはサービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-1764 49671 CVE-2011-1764 8651 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002348.html 2011-04-29 2011-10-12 View