Executive Summary

Summary
Titleexim4 security update
Informations
NameDSA-3747First vendor Publication2016-12-25
VendorDebianLast vendor Modification2016-12-25
Severity (Vendor) N/ARevision1

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:P/I:N/A:N)
Cvss Base Score2.6Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityHigh
Cvss Expoit Score4.9AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Bjoern Jacke discovered that Exim, Debian's default mail transfer agent, may leak the private DKIM signing key to the log files if specific configuration options are met.

For the stable distribution (jessie), this problem has been fixed in version 4.84.2-2+deb8u2.

We recommend that you upgrade your exim4 packages.

Original Source

Url : http://www.debian.org/security/2016/dsa-3747

CWE : Common Weakness Enumeration

%idName
100 %CWE-320Key Management Errors

CPE : Common Platform Enumeration

TypeDescriptionCount
Application78
Os4
Os1

Nessus® Vulnerability Scanner

DateDescription
2017-08-30Name : The remote openSUSE host is missing a security update.
File : openSUSE-2017-980.nasl - Type : ACT_GATHER_INFO
2017-03-07Name : The remote Amazon Linux AMI host is missing a security update.
File : ala_ALAS-2017-804.nasl - Type : ACT_GATHER_INFO
2017-01-06Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-3164-1.nasl - Type : ACT_GATHER_INFO
2016-12-27Name : The remote Debian host is missing a security update.
File : debian_DLA-762.nasl - Type : ACT_GATHER_INFO
2016-12-27Name : The remote Debian host is missing a security-related update.
File : debian_DSA-3747.nasl - Type : ACT_GATHER_INFO
2016-12-27Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_e7002b26caaa11e6a76a9f7324e5534e.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
DateInformations
2017-02-15 17:23:14
  • Multiple Updates
2017-02-01 21:25:52
  • Multiple Updates
2016-12-28 13:21:26
  • Multiple Updates
2016-12-25 13:24:01
  • First insertion