# MA-337.102012: MyCERT Alert - Critical Vulnerability in Exim

**Date:** 26 Oct 2012  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-337.102012  
**Advisory ID:** MA-337.102012

---

**1.0 Introduction**
A critical vulnerability has been identified in Exim, a mail transfer agent (MTA) used on Unix-like operating systems [1]. This vulnerability allows remote code execution from an anonymous connection as Exim run-time user.
This security vulnerability can be exploited by anyone who can send email from a domain for which they control the DNS. [2]
**2.0 Impact**
Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
**3.0 Affected Products**
- Exim between version 4.70 and 4.80
**4.0 Recommendation**
MyCERT recommends system administrator of this application to upgrade to the latest version of Exim. Exim 4.80.1 has been issued as security releases to correct the defect. Exim can be downloaded from <http://www.exim.org/mirmon/ftp_mirrors.html> or please refer to your operating system package management.
MyCERT advises the users of this software to be updated with the latest security announcements by the vendor.
MyCERT can be reached through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#1e7d677c7b6c2727275e7d677c7b6c6d7b7d6b6c776a67307367) or [[email protected]](/cdn-cgi/l/email-protection#8ae7f3e9eff8fecae7f3e9eff8fea4e5f8eda4e7f3)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT to 15888
Business Hours : Mon - Fri 08:30 -17:30 MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
**5.0 References**
i. <http://www.exim.org/>
ii. <https://lists.exim.org/lurker/message/20121026.080330.74b9147b.en.html>