Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 4076 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exim remote exploit ?

Pikkio
Anybody knows if astaro is vulnerable to this issue ?
Re: [exim-dev] Remote root vulnerability in Exim

Possible root vulnerability in Exim internet mailer - Update - The H Security: News and Features

Thanks


This thread was automatically locked due to age.
Parents
  • 0
    This needs to be answered/addressed by Astaro. 

    There is now a scripted attack or worm installing rootkits on servers with this vulnerability.
    Reports of Attacks against EXIM vulnerability

    I'm very glad that Astaro chroots everything, but that may not be enough to prevent any infection.

    Barry
  • 0 in reply to BarryG
    Just because it's reporting version 4.69 doesn't mean it's not been patched; the 2 patches necessary have been around a long time, and I wouldn't be surprised if Astaro didn't already have them compiled into their build of it.  I imagine that there's already an IPS rule that detects this sort of thing already as well.

    I'll be starting a case with Astaro to determine what their response is.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to BarryG
    Just because it's reporting version 4.69 doesn't mean it's not been patched; the 2 patches necessary have been around a long time, and I wouldn't be surprised if Astaro didn't already have them compiled into their build of it.  I imagine that there's already an IPS rule that detects this sort of thing already as well.

    I'll be starting a case with Astaro to determine what their response is.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
Cookie Information Banner