[ GLSA 201401-32 ] Exim: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Exim: Multiple vulnerabilities (GLSA 201401-32)
Severity: high
Exploitable: remote
Date: January 27, 2014
Bug(s): #322665, #348249, #353352, #366369, #439734
ID: 201401-32

Synopsis

Multiple vulnerabilities were found in Exim, the worst of which
leading to remote execution of arbitrary code with root privileges.


Background

Exim is a highly configurable, drop-in replacement for sendmail.

Affected Packages

Package: mail-mta/exim
Vulnerable: < 4.80.1
Unaffected: >= 4.80.1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Exim. Please review the
CVE identifiers referenced below for details.


Impact

A remote attacker could possibly execute arbitrary code with root
privileges, or cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Exim users should upgrade to the latest version: