Exim Remote Root
Summary: Cisco Talos confirmed that Snort's SMTP preprocessor detects the Exim remote root vulnerability (CVE-2010-4344) using signature SID 124:2:1, tested against a proof-of-concept posted to the Full-Disclosure mailing list on Saturday. No configuration change is needed at default settings, though anyone who altered their config should keep max_header_line_len at 2000 bytes or less, against a default of 1000 bytes.
Why it matters: Detection here depends on a header length setting: a configuration tweaked above 2000 bytes can leave the Exim remote root flaw uncovered even with the signature in place.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2010-4344
- Related
- CVE-2010-4344: Exim Heap-Based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026