{"id":771,"date":"2021-07-23T12:37:46","date_gmt":"2021-07-23T12:37:46","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/cve-2017-1000369-exim-stack-clash\/"},"modified":"2021-07-23T12:37:46","modified_gmt":"2021-07-23T12:37:46","slug":"cve-2017-1000369-exim-stack-clash","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/cve-2017-1000369-exim-stack-clash\/","title":{"rendered":"CVE 2017 1000369 Exim Stack Clash"},"content":{"rendered":"<\/p>\n
\n
<\/div>\n
\n

Background Information<\/h2>\n

On Monday, June 19, 2017, Qualsys announced memory handling vulnerabilities in a number of software distributions, including a vulnerability that could leverage a bug in the Exim software to achieve a local privilege escalation to root<\/code>.<\/p>\n

Impact<\/h2>\n

Vulnerable versions of Exim can be susceptible to local privilege escalation to root<\/code>.<\/p>\n

Releases<\/h2>\n
    \n
  • \n

    64 \u2014 64.0.30<\/p>\n<\/li>\n

  • \n

    62 \u2014 62.0.25<\/p>\n<\/li>\n

  • \n

    CURRENT \u2014 64.0.30<\/p>\n<\/li>\n

  • \n

    RELEASE \u2014 64.0.30<\/p>\n<\/li>\n

  • \n

    STABLE \u2014 64.0.30<\/p>\n<\/li>\n<\/ul>\n

    How to determine if your server is up to date<\/h2>\n

    The updated RPMs provided by cPanel will contain a changelog entry with the CVE number. You can check for this changelog entry with the following command: <\/p>\n

    \n
    rpm -<\/span>q --changelog <\/span>exim |<\/span> grep CVE-<\/span>2017<\/span>-<\/span>1000369<\/span><\/code><\/pre>\n<\/div>\n
    The output should resemble below: <\/p>\n
    \n
    -<\/span> Applied patch for<\/span> CVE-<\/span>2017<\/span>-<\/span>1000369<\/span><\/code><\/pre>\n<\/div>\n
    What to do if you are not up to date<\/h2>\n
    If your server is not running one of the above versions, update immediately.<\/p>\n
    To upgrade your server, use WHM\u2019s Upgrade to Latest Version<\/em> interface (WHM >> Home >> cPanel >> Upgrade to Latest Version<\/em>).<\/p>\n
    Alternatively, you can run the below commands to upgrade your server from the command line: <\/p>\n
    \n
    \n\n\n
    \n
    1\n<\/span>2\n<\/span><\/code><\/pre>\n<\/td>\n
    		\n
    \/<\/span>scripts<\/span>\/<\/span>upcp<\/span>\n\/<\/span>scripts<\/span>\/<\/span>check_cpanel_rpms<\/span> --<\/span>fix<\/span> --<\/span>long<\/span>-<\/span>list<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div>\n
    Verify the new Exim RPM was installed: <\/p>\n
    \n
    rpm -<\/span>q --changelog <\/span>exim |<\/span> grep CVE-<\/span>2017<\/span>-<\/span>1000369<\/span><\/code><\/pre>\n<\/div>\n
    The output should resemble below: <\/p>\n
    \n
    -<\/span> Applied patch for<\/span> CVE-<\/span>2017<\/span>-<\/span>1000369<\/span><\/code><\/pre>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"
    Background Information On Monday, June 19, 2017, Qualsys announced memory handling vulnerabilities in a number of software distributions, including a vulnerability that could leverage a bug in the Exim software to achieve a local privilege escalation to root. Impact Vulnerable versions of Exim can be susceptible to local privilege escalation to root. Releases 64 \u2014 …<\/p>\n","protected":false},"author":1,"featured_media":772,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/771"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=771"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/771\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/772"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}