Open-source Exim remote attack bug: 400,000 servers still vulnerable, patch now
Summary
Admins are being urged to update email server program Exim, patched in February, to close a remote execution flaw.Exim stands for EXperimental Internet Mailer and was developed at the University of Cambridge in the UK in 1995 for Unix systems as an alternative to Sendmail.Chang developed an exploit for it in Debian and Ubuntu that targeted the SMTP daemon of Exim and tricks its memory-management mechanism.Linux distributions were given early access to the patch and, according to Exim developers , by the time the vulnerability was made public they should have already built packages with the fixed version.Purism, the Linux hardware vendor for users who want as much control as possible over their gear, has integrated Heads open-source CPU firmware into its PCs.