fwd: Possible root vulnerability in Exim internet mailer

urmel · n00b Joined: 24 Apr 2010 Posts: 5

Just forwarding this since I dont think everyone is aware of that exploit yet.
I couldnt verify it in my amd64 enviroment but still it sounds to serious
to ignore.
Links on Heise Security

quick & dirty hack

if you dont use ${run} in the config

replace 'US"run"' in line 123 of src/expand.c with
'US"foo42bar"' or something more unique string
or remove the code below "case EITEM_RUN" further down