CVE ID:	CVE-2010-4344
Description:	Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
Test IDs:	1.3.6.1.4.1.25623.1.0.68554   1.3.6.1.4.1.25623.1.0.68966   1.3.6.1.4.1.25623.1.0.122289   1.3.6.1.4.1.25623.1.0.880458   1.3.6.1.4.1.25623.1.0.881363
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4344 BugTraq ID: 45308 http://www.securityfocus.com/bid/45308 Bugtraq: 20101213 Exim security issue in historical release (Google Search) http://www.securityfocus.com/archive/1/515172/100/0/threaded CERT/CC vulnerability note: VU#682457 http://www.kb.cert.org/vuls/id/682457 Debian Security Information: DSA-2131 (Google Search) http://www.debian.org/security/2010/dsa-2131 http://www.metasploit.com/modules/exploit/unix/smtp/exim4_string_format http://www.theregister.co.uk/2010/12/11/exim_code_execution_peril/ http://www.exim.org/lurker/message/20101207.215955.bb32d4f2.en.html http://lists.exim.org/lurker/message/20101210.164935.385e04d0.en.html http://openwall.com/lists/oss-security/2010/12/10/1 http://www.openwall.com/lists/oss-security/2021/05/04/7 http://www.osvdb.org/69685 RedHat Security Advisories: RHSA-2010:0970 http://www.redhat.com/support/errata/RHSA-2010-0970.html http://www.securitytracker.com/id?1024858 http://secunia.com/advisories/40019 http://secunia.com/advisories/42576 http://secunia.com/advisories/42586 http://secunia.com/advisories/42587 http://secunia.com/advisories/42589 SuSE Security Announcement: SUSE-SA:2010:059 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00003.html http://www.ubuntu.com/usn/USN-1032-1 http://www.vupen.com/english/advisories/2010/3171 http://www.vupen.com/english/advisories/2010/3172 http://www.vupen.com/english/advisories/2010/3181 http://www.vupen.com/english/advisories/2010/3186 http://www.vupen.com/english/advisories/2010/3204 http://www.vupen.com/english/advisories/2010/3246 http://www.vupen.com/english/advisories/2010/3317