medium5.9
CVE-2016-9963
Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
Impact
Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Exim | Exim | through 4.87 |
| Canonical | Ubuntu Linux | Versions 12.04, 14.04, 16.04, 16.10 |
| Debian | Debian Linux | Version 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2016/dsa-3747
- http://www.exim.org/static/doc/CVE-2016-9963.txt
- http://www.securityfocus.com/bid/94947
- http://www.securitytracker.com/id/1037484
- http://www.ubuntu.com/usn/USN-3164-1
- https://bugs.exim.org/show_bug.cgi?id=1996
- http://www.debian.org/security/2016/dsa-3747
- http://www.exim.org/static/doc/CVE-2016-9963.txt
- http://www.securityfocus.com/bid/94947
- http://www.securitytracker.com/id/1037484
- http://www.ubuntu.com/usn/USN-3164-1
- https://bugs.exim.org/show_bug.cgi?id=1996