Bug 921520 (CVE-2023-51766)

Summary:	<mail-mta/exim-4.97.1: smtp smuggling
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED FIXED
Severity:	normal	CC:	bertrand, grobian
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	https://bugs.exim.org/show_bug.cgi?id=3063
See Also:	https://bugs.gentoo.org/show_bug.cgi?id=920509 https://bugs.gentoo.org/show_bug.cgi?id=921521
Whiteboard:	A3 [glsa+]
Package list:		Runtime testing required:	---
Bug Depends on:	921844
Bug Blocks:

Description John Helmert III archtester

2024-01-06 20:53:27 UTC

CVE-2023-51766:

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

Indeed fixed in 4.97.1. Please stabilize.

Comment 1 Hans de Graaff gentoo-dev

2024-02-10 15:04:07 UTC

commit c11d2a7a9507bd2392e0c8c83e6719debbf18ab1
Author: Fabian Groffen <grobian@gentoo.org>
Date:   Fri Jan 12 12:56:22 2024 +0100

    mail-mta/exim: cleanup vulnerable

Comment 2 Larry the Git Cow gentoo-dev

2024-02-18 09:29:49 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=885ac7b1a9d8098a326b2e38010dda5ab6534a71

commit 885ac7b1a9d8098a326b2e38010dda5ab6534a71
Author:     GLSAMaker <glsamaker@gentoo.org>
AuthorDate: 2024-02-18 09:29:14 +0000
Commit:     Hans de Graaff <graaff@gentoo.org>
CommitDate: 2024-02-18 09:29:37 +0000

    [ GLSA 202402-18 ] Exim: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/914923
    Bug: https://bugs.gentoo.org/921520
    Signed-off-by: GLSAMaker <glsamaker@gentoo.org>
    Signed-off-by: Hans de Graaff <graaff@gentoo.org>

 glsa-202402-18.xml | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 53 insertions(+)