{"id":112564,"date":"2023-12-29T09:10:21","date_gmt":"2023-12-29T07:10:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/obnovlenie-exim-4-97-1-s-dobavleniem-zashhity-ot-ataki-smtp-smuggling"},"modified":"2023-12-29T09:10:21","modified_gmt":"2023-12-29T07:10:21","slug":"obnovlenie-exim-4-97-1-s-dobavleniem-zashhity-ot-ataki-smtp-smuggling","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-exim-4-97-1-s-dobavleniem-zashhity-ot-ataki-smtp-smuggling","title":{"rendered":"Aktualizace Exim 4.97.1 s p\u0159id\u00e1n\u00edm ochrany proti \u00fatoku SMTP Smuggling","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dostupn\u00e1 je opraven\u00e1 verze po\u0161tovn\u00edho serveru Exim 4.97.1, kter\u00e1 zahrnuje zm\u011bny pro ochranu proti \u00fatoku SMTP Smuggling, kter\u00fd umo\u017e\u0148uje rozd\u011blit jednu zpr\u00e1vu na n\u011bkolik r\u016fzn\u00fdch zpr\u00e1v pomoc\u00ed nestandardn\u00ed sekvence pro odd\u011blov\u00e1n\u00ed e-mail\u016f. P\u016fvodn\u011b se p\u0159edpokl\u00e1dalo, \u017ee probl\u00e9m se projevuje pouze u postfixu a sendmailu, ale pozd\u011bji se uk\u00e1zalo, \u017ee se t\u00fdk\u00e1 i Exim (CVE-2023-51766). <\/p>\n

Exim m\u016f\u017ee zpracov\u00e1vat jako odd\u011blova\u010de zpr\u00e1v sekvence «\n.\n», «\r\n.\n» a «\n.\r\n», pokud je na serveru pro p\u0159\u00edchoz\u00ed spojen\u00ed povolena podpora roz\u0161\u00ed\u0159en\u00ed «PIPELINING» a «CHUNKING». Bylo p\u0159id\u00e1no nastaven\u00ed strict_crlf, kter\u00e9 umo\u017e\u0148uje zpracov\u00e1n\u00ed nestandardn\u00edch sekvenc\u00ed. Jako ochrann\u00e9 opat\u0159en\u00ed m\u016f\u017eete zak\u00e1zat roz\u0161\u00ed\u0159en\u00ed «PIPELINING» nebo «CHUNKING» pomoc\u00ed nastaven\u00ed pipelining_advertise_hosts, pipelining_connect_advertise_hosts a chunking_advertise_hosts.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Exim 4.97.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 SMTP Smuggling, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0440\u0430\u0441\u0449\u0435\u043f\u0438\u0442\u044c \u043e\u0434\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043f\u0438\u0441\u0435\u043c. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 postfix \u0438 sendmail, \u043d\u043e \u043f\u043e\u0437\u0434\u043d\u0435\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438 Exim (CVE-2023-51766). Exim \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112564","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Aktualizace Exim 4.97.1 s p\u0159id\u00e1n\u00edm ochrany proti \u00fatoku SMTP Smuggling | ProHoster","description":"Dostupn\u00e1 je opraven\u00e1 verze po\u0161tovn\u00edho serveru Exim 4.97.1, kter\u00e1 zahrnuje zm\u011bny pro ochranu proti \u00fatoku SMTP Smuggling, kter\u00fd umo\u017e\u0148uje rozd\u011blit jednu zpr\u00e1vu na n\u011bkolik r\u016fzn\u00fdch zpr\u00e1v pomoc\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-exim-4-97-1-s-dobavleniem-zashhity-ot-ataki-smtp-smuggling","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Exim 4.97.1 \u0441 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 SMTP Smuggling | ProHoster","og:description":"\u0414\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Exim 4.97.1, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u0442\u0430\u043a\u0438 SMTP Smuggling, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0440\u0430\u0441\u0449\u0435\u043f\u0438\u0442\u044c \u043e\u0434\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/obnovlenie-exim-4-97-1-s-dobavleniem-zashhity-ot-ataki-smtp-smuggling","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-29T07:10:21+00:00","article:modified_time":"2023-12-29T07:10:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/112564","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=112564"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/112564\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=112564"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=112564"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=112564"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}