https://community.checkpoint.com/t5/General-Topics/vulnerability-Exim-MTA-lt-gt-Check-Point/m-p/194032#M32475 <P>Pretty sure we use postfix as our MTA, not exim.</P> Mon, 02 Oct 2023 13:03:39 GMT PhoneBoy 2023-10-02T13:03:39Z https://community.checkpoint.com/t5/General-Topics/vulnerability-Exim-MTA-lt-gt-Check-Point/m-p/193986#M32462 <P>A new vulnerability is known. The MTA on Check Point is based on EXIMs solution ?</P> <P><A title="(0Day) Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability" href="https://www.zerodayinitiative.com/advisories/ZDI-23-1471/" target="_blank" rel="noopener">(0Day) Exim Improper Neutralization of Special Elements Remote Code Execution Vulnerability<BR /></A></P> <DIV class="table-wrap"> <TABLE class="wrapped confluenceTable tablesorter tablesorter-default stickyTableHeaders" role="grid"> <THEAD class="tableFloatingHeaderOriginal"> <TR class="tablesorter-headerRow" role="row"> <TH class="confluenceTh tablesorter-header sortableHeader tablesorter-headerDesc" tabindex="0" role="columnheader" scope="col" data-column="0" aria-disabled="false" aria-sort="descending" aria-label="CVE: Descending sort applied, activate to apply an ascending sort"> <DIV class="tablesorter-header-inner">CVE</DIV> </TH> <TH class="confluenceTh tablesorter-header sortableHeader tablesorter-headerUnSorted" tabindex="0" role="columnheader" scope="col" data-column="1" aria-disabled="false" aria-sort="none" aria-label="Schwachstelle: No sort applied, activate to apply an ascending sort"> <DIV class="tablesorter-header-inner">vulnerability</DIV> </TH> </TR> </THEAD> <TBODY class="" aria-live="polite" aria-relevant="all"> <TR class="" role="row"> <TD class="confluenceTd">CVE-2023-42119</TD> <TD class="confluenceTd">Exim dnsdb Information Disclosure</TD> </TR> <TR class="" role="row"> <TD class="confluenceTd">CVE-2023-42117</TD> <TD class="confluenceTd">Exim Remote Code Execution</TD> </TR> <TR class="" role="row"> <TD class="confluenceTd">CVE-2023-42116</TD> <TD class="confluenceTd">Exim SMTP Challenge Buffer-Overflow</TD> </TR> <TR class="" role="row"> <TD class="confluenceTd">CVE-2023-42115</TD> <TD class="confluenceTd">Exim AUTH Buffer-Overflow</TD> </TR> <TR class="" role="row"> <TD class="confluenceTd">CVE-2023-42114</TD> <TD class="confluenceTd">Exim NTLM Challenge Information Disclosure</TD> </TR> </TBODY> </TABLE> </DIV> <P>&nbsp;</P> <P>Any information about that vulnerabilities and Check Point ?</P> Mon, 02 Oct 2023 05:42:16 GMT https://community.checkpoint.com/t5/General-Topics/vulnerability-Exim-MTA-lt-gt-Check-Point/m-p/193986#M32462 Wolfgang 2023-10-02T05:42:16Z https://community.checkpoint.com/t5/General-Topics/vulnerability-Exim-MTA-lt-gt-Check-Point/m-p/194032#M32475 <P>Pretty sure we use postfix as our MTA, not exim.</P> Mon, 02 Oct 2023 13:03:39 GMT https://community.checkpoint.com/t5/General-Topics/vulnerability-Exim-MTA-lt-gt-Check-Point/m-p/194032#M32475 PhoneBoy 2023-10-02T13:03:39Z