{"id":110362,"date":"2023-09-28T09:56:13","date_gmt":"2023-09-28T07:56:13","guid":{"rendered":"https:\/\/prohoster.info\/?p=110362"},"modified":"2023-09-28T09:56:13","modified_gmt":"2023-09-28T07:56:13","slug":"tri-kriticheskie-uyazvimosti-v-exim-pozvolyayushhie-udalyonno-vypolnit-kod-na-servere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/tri-kriticheskie-uyazvimosti-v-exim-pozvolyayushhie-udalyonno-vypolnit-kod-na-servere","title":{"rendered":"Trei vulnerabilit\u0103\u021bi critice \u00een Exim, care permit executarea codului de la distan\u021b\u0103 pe server","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Proiectul Zero Day Initiative (ZDI) a dezv\u0103luit informa\u021bii despre vulnerabilit\u0103\u021bile necorectate (0-day) (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) \u00een serverul de email Exim, care permit executarea de cod mali\u021bios pe server cu drepturi de proces, accept\u00e2nd conexiuni pe portul 25. Autentificarea nu este necesar\u0103 pentru a efectua atacul.       <\/p>\n<p>Prima vulnerabilitate (CVE-2023-42115) este cauzat\u0103 de o eroare \u00een serviciul smtp \u0219i este legat\u0103 de lipsa unor verific\u0103ri corespunz\u0103toare a datelor primite de la utilizator \u00een timpul sesiunii SMTP, utilizate \u00een calcularea dimensiunii bufferului. Ca urmare, atacatorul poate ob\u021bine scrierea controlat\u0103 a datelor sale \u00een zona de memorie dincolo de bufferul alocat.     <\/p>\n<p>A doua vulnerabilitate (CVE-2023-42116) este prezent\u0103 \u00een procesarea cererilor NTLM \u0219i este cauzat\u0103 de copierea datelor primite de la utilizator \u00een bufferul de dimensiune fix\u0103 f\u0103r\u0103 verificarea necesar\u0103 a dimensiunii informa\u021biilor scrise.     <\/p>\n<p>A treia vulnerabilitate (CVE-2023-42117) este prezent\u0103 \u00een procesul smtp care accept\u0103 conexiuni pe portul TCP 25 \u0219i este cauzat\u0103 de lipsa verific\u0103rii datelor de intrare, ceea ce poate duce la scrierea datelor trimise de utilizator \u00een zona de memorie dincolo de bufferul alocat.            <\/p>\n<p>Vulnerabilit\u0103\u021bile sunt marcate ca 0-day, adic\u0103 r\u0103m\u00e2n necorectate, dar raportul ZDI afirm\u0103 c\u0103 dezvoltatorii Exim au fost avertiza\u021bi cu privire la probleme. Ultima modificare a bazei de cod Exim a fost efectuat\u0103 acum dou\u0103 zile \u0219i nu este clar c\u00e2nd vor fi remediate problemele (produc\u0103torii distribu\u021biilor nu au avut timp s\u0103 reac\u021bioneze deoarece informa\u021bia a fost dezv\u0103luit\u0103 f\u0103r\u0103 detalii cu c\u00e2teva ore \u00een urm\u0103). \u00cen prezent, dezvoltatorii Exim se preg\u0103tesc pentru lansarea unei noi versiuni 4.97, dar nu exist\u0103 date precise despre momentul public\u0103rii acesteia. Singura metod\u0103 de protec\u021bie men\u021bionat\u0103 pentru moment este restric\u021bionarea accesului la serviciul SMTP bazat pe Exim.        <\/p>\n<p>Pe l\u00e2ng\u0103 vulnerabilit\u0103\u021bile critice men\u021bionate mai sus, au fost dezv\u0103luite informa\u021bii \u0219i despre c\u00e2teva probleme mai pu\u021bin grave:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2023-42118 \u2014 o overflow de integer \u00een biblioteca libspf2, care apare la analiza macrosurilor SPF. Aceast\u0103 vulnerabilitate permite ini\u021bierea deterior\u0103rii de la distan\u021b\u0103 a con\u021binutului memoriei \u0219i poate fi folosit\u0103 poten\u021bial pentru a executa codul s\u0103u pe <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/server\/dts-dronten\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2638\">server<\/a>.\n<li class=\"l\"> CVE-2023-42114 \u2014 o eroare care duce la citirea dintr-o zon\u0103 de memorie din afara buffer-ului \u00een handler-ul NTLM. Problema poate duce la scurgerea con\u021binutului memoriei procesului care gestioneaz\u0103 cererile de re\u021bea.\n<li class=\"l\"> CVE-2023-42119 \u2014 o vulnerabilitate \u00een handler-ul dnsdb, care duce la scurgerea con\u021binutului memoriei procesului smtp.    <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=59836\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 Zero Day Initiative (ZDI) \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043d\u0430 25 \u0441\u0435\u0442\u0435\u0432\u043e\u043c \u043f\u043e\u0440\u0442\u0443. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f. \u041f\u0435\u0440\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-42115) \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 smtp \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0434\u043e\u043b\u0436\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0434\u0430\u043d\u043d\u044b\u0445, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110362","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Zero Day Initiative (ZDI) \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/tri-kriticheskie-uyazvimosti-v-exim-pozvolyayushhie-udalyonno-vypolnit-kod-na-servere\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 Zero Day Initiative (ZDI) \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/tri-kriticheskie-uyazvimosti-v-exim-pozvolyayushhie-udalyonno-vypolnit-kod-na-servere\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-09-28T07:56:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-09-28T07:56:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Trei vulnerabilit\u0103\u021bi critice \u00een Exim, care permit executarea de cod de la distan\u021b\u0103 pe server | ProHoster","description":"Proiectul Zero Day Initiative (ZDI) a dezv\u0103luit informa\u021bii despre vulnerabilit\u0103\u021bile necorectate (0-day) (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) \u00een serverul de po\u0219t\u0103 Exim, care permit executarea de cod de la distan\u021b\u0103 pe server.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/tri-kriticheskie-uyazvimosti-v-exim-pozvolyayushhie-udalyonno-vypolnit-kod-na-servere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 Zero Day Initiative (ZDI) \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 (0-day) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2023-42115, CVE-2023-42116, CVE-2023-42117) \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Exim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/tri-kriticheskie-uyazvimosti-v-exim-pozvolyayushhie-udalyonno-vypolnit-kod-na-servere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-09-28T07:56:13+00:00","article:modified_time":"2023-09-28T07:56:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"110362","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:38:13","updated":"2026-02-09 21:38:13","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110362","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=110362"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110362\/revisions"}],"predecessor-version":[{"id":159920,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110362\/revisions\/159920"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=110362"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=110362"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=110362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}