CVE-2016-9963 in Exim

Riassunto

di MITRE

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 16/12/2016
• Divulgazione: 01/02/2017
• Moderazione: accettato
• Voce: VDB-94599
• CPE: pronto
• CWE: CWE-320 (confermato)
• CVSS: 5.9 (NVD)
• EPSS: 0.03098
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-9963
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-9963
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-9963/