{"id":110482,"date":"2023-10-05T03:11:34","date_gmt":"2023-10-05T01:11:34","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-exim-obnaruzhili-kriticheskie-uyazvimosti-pozvolyashhie-vypolnit-na-servere-proizvolnyj-kod"},"modified":"2023-10-05T03:11:34","modified_gmt":"2023-10-05T01:11:34","slug":"v-exim-obnaruzhili-kriticheskie-uyazvimosti-pozvolyashhie-vypolnit-na-servere-proizvolnyj-kod","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-exim-obnaruzhili-kriticheskie-uyazvimosti-pozvolyashhie-vypolnit-na-servere-proizvolnyj-kod","title":{"rendered":"Sono state scoperte vulnerabilit\u00e0 critiche in Exim che consentono l'esecuzione di codice arbitrario sul server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

ZDI (Zero Day Initiative) ha pubblicato informazioni su tre vulnerabilit\u00e0 critiche trovate nel server di posta Exim, che consentono l'esecuzione di codice arbitrario da parte del processo del server che ha aperto la porta 25. Per effettuare l'attacco non \u00e8 necessaria l'autenticazione sul server.<\/p>\n

    <\/p>\n
  1. CVE-2023-42115<\/a> \u2013 consente di ottenere la scrittura dei propri dati al di fuori del buffer dedicato. \u00c8 causata da un errore di validazione dei dati nell servizio SMTP.<\/li>\n

    <\/noindex> <\/p>\n

  2. CVE-2023-42116<\/a> \u2013 causata dalla copia dei dati dall'utente in un buffer di dimensioni fisse senza verificare la dimensione richiesta.<\/li>\n
  3. CVE-2023-42117<\/a> \u2013 anch'essa causata dalla mancanza di validazione dei dati sulla porta 25 del servizio SMTP.<\/li>\n<\/ol>\n

    Le vulnerabilit\u00e0 sono state segnate come 0-day, il che significa che non sono correttive, anche se secondo ZDI gli sviluppatori di Exim sono stati avvertiti della loro presenza da un po' di tempo. La correzione potrebbe essere nella versione 4.97 del server, ma non \u00e8 sicuro.<\/p>\n

    Come protezione contro queste vulnerabilit\u00e0, al momento si suggerisce di limitare l'accesso a SMTP sulla porta 25.<\/p>\n

    <\/p>\n

    UPD.<\/strong> Sembra che non sia cos\u00ec grave. Queste vulnerabilit\u00e0 sono di natura locale. Non funzionano se il server non utilizza NTLM e autenticazione EXTERNAL, non \u00e8 protetto da un proxy, non utilizza server DNS potenzialmente pericolosi e non utilizza spf in acl. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435…<\/a><\/p>\n

    <\/noindex><\/p>\n

    Fonte: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    ZDI (Zero Day Initiative) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0435\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0448\u0435\u0433\u043e 25\u0439 \u043f\u043e\u0440\u0442. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f. CVE-2023-42115 \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0432\u043e\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430.\u00a0\u0412\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 SMTP. CVE-2023-42116 \u2013\u00a0\u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110482","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Sono state scoperte vulnerabilit\u00e0 critiche in Exim che consentono l'esecuzione di codice arbitrario sul server | ProHoster","description":"ZDI (Zero Day Initiative) ha pubblicato informazioni su tre vulnerabilit\u00e0 critiche trovate nel server di posta Exim, che consentono l'esecuzione di codice arbitrario da parte del processo del server che ha aperto la porta 25. Per effettuare l'attacco non \u00e8 necessaria l'autenticazione sul server. CVE-2023-42115 \u2013 consente di ottenere la scrittura dei propri dati al di fuori del buffer dedicato. \u00c8 causata da un errore di validazione dei dati nel servizio SMTP. CVE-2023-42116 \u2013 causata dalla copia","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-exim-obnaruzhili-kriticheskie-uyazvimosti-pozvolyashhie-vypolnit-na-servere-proizvolnyj-kod","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Exim \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0449\u0438\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 | ProHoster","og:description":"ZDI (Zero Day Initiative) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0442\u0440\u0435\u0445 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043e\u0442\u043a\u0440\u044b\u0432\u0448\u0435\u0433\u043e 25\u0439 \u043f\u043e\u0440\u0442. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f. CVE-2023-42115 \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u0432\u043e\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0443\u0444\u0435\u0440\u0430. \u0412\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 SMTP. CVE-2023-42116 \u2013 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/v-exim-obnaruzhili-kriticheskie-uyazvimosti-pozvolyashhie-vypolnit-na-servere-proizvolnyj-kod","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-10-05T01:11:34+00:00","article:modified_time":"2023-10-05T01:11:34+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/110482","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=110482"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/110482\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=110482"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=110482"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=110482"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}