Critical Exim bug bypasses security filters on 1.5 million mail servers

Caute_cautim — Thu, 18 Jul 2024 01:03:57 GMT

Hi All

Censys warns that over 1.5 million Exim mail transfer agent (MTA) instances are unpatched against a critical vulnerability that lets threat actors bypass security filters.

Tracked as CVE-2024-39929 and patched by Exim developers on Wednesday, the security flaw impacts Exim releases up to and including version 4.97.1.

The vulnerability is due to the incorrect parsing of multiline RFC2231 header filenames, which can let remote attackers deliver malicious executable attachments into end users' mailboxes by circumventing the $mime_filename extension-blocking protection mechanism.

https://www.bleepingcomputer.com/news/security/critical-exim-bug-bypasses-security-filters-on-15-million-mail-servers/

Regards

Caute_Cautim

topic Critical Exim bug bypasses security filters on 1.5 million mail servers in Threats

Critical Exim bug bypasses security filters on 1.5 million mail servers