Millions of Exim mail servers exposed to zero-day RCE attacks

Syndicated from the fediverse. Read and engage on the original instance.

Millions of Exim mail servers exposed to zero-day RCE attacks

https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day-rce-attacks/Open link View original on lemmy.nz

Comments2

2 replies

dack

lemmy.world

While ZDI reported the vulnerability to the Exim team in June 2022 and resent info on the flaw at the vendor's request in May 2023, the developers failed to provide an update on their patch progress.

Yikes. Sitting on a critical RCE in internet exposed server software for a year. That's a great way to destroy trust in a project.

phx reply

lemmy.ca

One of the first things I tended to do after building a new Debian etc system was uninstall Exim. Vulnerabilities aside is kinda crap to maintain versus e.g Postfix