{"vulnerability": "CVE-2010-4344", "sightings": [{"uuid": "b87cb605-53c7-4e5e-a190-e56141263ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "c695c32d-8ad8-4e5b-934d-53e4c61959c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971395", "content": "", "creation_timestamp": "2024-12-24T20:28:42.071438Z"}, {"uuid": "fb13ec8a-e886-4fc5-a2d7-43a25e388b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "fafdee0c-d2da-47fb-945a-1347bd3b4a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:00.000000Z"}, {"uuid": "e781f24f-9733-4600-948d-095fc21c6d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:51.000000Z"}, {"uuid": "42dae73c-6888-413f-9f5c-934fb2f8a427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/exim4_string_format.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3a80967e-bbba-4b30-821f-a6fab32589f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2010-4344", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3f8d091b-2d24-4233-80f8-4430806092a8", "content": "", "creation_timestamp": "2026-02-02T12:28:05.989531Z"}, {"uuid": "0075caa5-56b1-4f46-bebf-186795454197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-4344", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/15725", "content": "", "creation_timestamp": "2010-12-11T00:00:00.000000Z"}, {"uuid": "e016b487-b819-4b31-837a-5aa970430d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-4344", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16925", "content": "", "creation_timestamp": "2010-12-16T00:00:00.000000Z"}, {"uuid": "7f623d10-2cf7-4673-8e7a-43570c9f0e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://t.me/anwar1213xx/1303", "content": "\u0628\u0646\u0643 \u0633\u0648\u0631\u064a \u0645\u0635\u0627\u0628 \u0628\u062b\u063a\u0631\u0647 \u0645\u0646 \u0646\u0648\u0639\ncve2010-4344:\n\n\n\u062a\u0641\u0627\u0635\u064a\u0644 CVE-2010-4344\n\u0627\u0644\u0645\u0639\u062f\u0644\n\u062a\u0645 \u062a\u0639\u062f\u064a\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646\u0630 \u0623\u0646 \u062a\u0645 \u062a\u062d\u0644\u064a\u0644\u0647\u0627 \u0628\u0648\u0627\u0633\u0637\u0629 NVD. \u0625\u0646\u0647\u0627 \u0641\u064a \u0627\u0646\u062a\u0638\u0627\u0631 \u0625\u0639\u0627\u062f\u0629 \u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u064a \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a \u0639\u0644\u0649 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0645\u0642\u062f\u0645\u0629.\n\n\u0627\u0644\u0648\u0635\u0641 \u0627\u0644\u062d\u0627\u0644\u064a\n\u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u062e\u0632\u0646 \u0627\u0644\u0645\u0624\u0642\u062a \u0627\u0644\u0645\u0633\u062a\u0646\u062f \u0625\u0644\u0649 \u0627\u0644\u0643\u0648\u0645\u0629 \u0641\u064a \u062f\u0627\u0644\u0629 string_vformat \u0641\u064a string.c \u0641\u064a Exim \u0642\u0628\u0644 4.70 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0628\u0631 \u062c\u0644\u0633\u0629 SMTP \u062a\u062a\u0636\u0645\u0646 \u0623\u0645\u0631\u064a\u0646 MAIL \u062c\u0646\u0628\u064b\u0627 \u0625\u0644\u0649 \u062c\u0646\u0628 \u0645\u0639 \u0631\u0633\u0627\u0644\u0629 \u0643\u0628\u064a\u0631\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0631\u0624\u0648\u0633 \u0645\u062a\u0642\u0646\u0629 \u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0633\u062c\u064a\u0644 \u0631\u0641\u0636 \u063a\u064a\u0631 \u0635\u062d\u064a\u062d.\n\n\n\n\nAnonyMous Islamic : https://linktr.ee/Cyber_Yemen\n\nTele : https://t.me/YCS_CVE\n\nWeb : http://bso.com.sy", "creation_timestamp": "2021-11-19T15:53:51.000000Z"}, {"uuid": "7a9e1af2-452d-48d7-b57b-e7bb97197ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://t.me/anwar1213xx/1302", "content": "\u0628\u0646\u0643 \u0633\u0648\u0631\u064a \u0645\u0635\u0627\u0628 \u0628\u062b\u063a\u0631\u0647 \u0645\u0646 \u0646\u0648\u0639\ncve2010-4344:\n\n\n\u062a\u0641\u0627\u0635\u064a\u0644 CVE-2010-4344\n\u0627\u0644\u0645\u0639\u062f\u0644\n\u062a\u0645 \u062a\u0639\u062f\u064a\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646\u0630 \u0623\u0646 \u062a\u0645 \u062a\u062d\u0644\u064a\u0644\u0647\u0627 \u0628\u0648\u0627\u0633\u0637\u0629 NVD. \u0625\u0646\u0647\u0627 \u0641\u064a \u0627\u0646\u062a\u0638\u0627\u0631 \u0625\u0639\u0627\u062f\u0629 \u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u064a \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a \u0639\u0644\u0649 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0645\u0642\u062f\u0645\u0629.\n\n\u0627\u0644\u0648\u0635\u0641 \u0627\u0644\u062d\u0627\u0644\u064a\n\u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u062e\u0632\u0646 \u0627\u0644\u0645\u0624\u0642\u062a \u0627\u0644\u0645\u0633\u062a\u0646\u062f \u0625\u0644\u0649 \u0627\u0644\u0643\u0648\u0645\u0629 \u0641\u064a \u062f\u0627\u0644\u0629 string_vformat \u0641\u064a string.c \u0641\u064a Exim \u0642\u0628\u0644 4.70 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0628\u0631 \u062c\u0644\u0633\u0629 SMTP \u062a\u062a\u0636\u0645\u0646 \u0623\u0645\u0631\u064a\u0646 MAIL \u062c\u0646\u0628\u064b\u0627 \u0625\u0644\u0649 \u062c\u0646\u0628 \u0645\u0639 \u0631\u0633\u0627\u0644\u0629 \u0643\u0628\u064a\u0631\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0631\u0624\u0648\u0633 \u0645\u062a\u0642\u0646\u0629 \u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0633\u062c\u064a\u0644 \u0631\u0641\u0636 \u063a\u064a\u0631 \u0635\u062d\u064a\u062d.", "creation_timestamp": "2021-11-19T15:29:10.000000Z"}, {"uuid": "d41b8763-364a-4066-af9f-b4b9b259e961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "published-proof-of-concept", "source": "https://t.me/anwar1213xx/1304", "content": "\u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0645 \u0623\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0628\u062a\u0627\u0631\u064a\u062e07/12/2010. \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0645 \u0646\u0634\u0631\u0647\u0627 \u0628\u062a\u0627\u0631\u064a\u062e 07/12/2010 \u0643\u0640 RHSA-2010:0970 \u0643\u0640 \u0627\u0633\u062a\u0634\u0627\u0631\u064a (CERT.org). \u064a\u0645\u0643\u0646 \u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u0627\u0633\u062a\u0634\u0627\u0631\u0629 \u0645\u0646 \u0647\u0646\u0627 kb.cert.org.\n\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u0630\u0647 \u062a\u0645 \u062a\u0633\u0645\u064a\u062a\u0647\u0627CVE-2010-4344. \u062a\u0645\u062a \u0625\u062d\u0627\u0644\u0629 \u0627\u0644\u0640 \u0633\u064a \u0641\u064a \u0623\u064a30/11/2010. \u064a\u0645\u0643\u0646 \u0634\u0646 \u0627\u0644\u0647\u062c\u0645\u0629 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0647\u0630\u0647 \u0639\u0646 \u0628\u0639\u062f. \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u062a\u0642\u0646\u064a\u0629 \u0645\u062a\u0648\u0641\u0631\u0629. \u0627\u0644\u062a\u0642\u0627\u0631\u064a\u0631 \u062a\u0634\u064a\u0631 \u0628\u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u0630\u0647 \u0630\u0627\u062a \u0634\u0647\u0631\u0629 \u0623\u0642\u0644 \u0645\u0646 \u0627\u0644\u0645\u062a\u0648\u0633\u0637. \u0647\u0646\u0627\u0644\u0643 \u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0645\u062a\u0648\u0641\u0631\u0629. \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 \u0627\u0644 \u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627. \u0633\u0639\u0631 \u0627\u0644 \u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0647\u0630\u0647 \u064a\u062a\u0631\u0627\u0648\u062d \u0628\u062d\u0648\u0627\u0644\u064a \u062a\u0642\u0631\u064a\u0628\u0627\u064bUSD $0-$5k \u0641\u064a \u0647\u0630\u0647 \u0627\u0644\u0644\u062d\u0638\u0629.\n\n\u062a\u0645 \u0623\u0639\u062a\u0628\u0631\u0627\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u0641\u0639\u0627\u0644\u0629 \u0644\u0644\u063a\u0627\u064a\u0629. \u062a\u0633\u062a\u0637\u064a\u0639 \u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0645\u0646 \u0647\u0646\u0627 securityfocus.com. \u0628\u0645\u0627 \u0623\u0646\u0647\u0627 \u062b\u063a\u0631\u0629 \u0647\u062c\u0648\u0645 \u0641\u0648\u0631\u064a \u0641\u0642\u062f \u0643\u0627\u0646 \u0645\u062a\u0648\u0633\u0637 \u0633\u0639\u0631\u0647\u0627 \u0647\u0648 \u062a\u0642\u0631\u064a\u0628\u0627$0-$5k. \u0628\u0631\u0646\u0627\u0645\u062c \u0646\u064a\u0633\u0648\u0633 \u0644\u0641\u062d\u0635 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u064a\u0648\u0641\u0631 \u0645\u0644\u062d\u0642 \u0628\u0639\u0646\u0648\u0627\u064668160(Oracle Linux 4 / 5 : exim (ELSA-2010-0970)), \u064a\u0645\u0643\u0646\u0643 \u0645\u0646 \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0648\u062c\u0648\u062f \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629. \u0623\u0646\u0647\u0627 \u0645\u0635\u0646\u0641\u0629 \u0625\u0644\u0649 \u0639\u0627\u0626\u0644\u0629Oracle Linux Local Security Checks. \u0627\u0644\u0645\u0644\u062d\u0642 \u064a\u0639\u0645\u0644 \u0628\u062d\u0633\u0628 \u0627\u0644\u0635\u0646\u0641local. \u0648\u0647\u0648 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u0627\u0644\u0645\u0646\u0641\u06300. \u062e\u062f\u0645\u0629 \u0641\u062d\u0635 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0643\u0648\u064a\u0644\u0633 \u064a\u0645\u0643\u0646\u0647\u0627 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0628\u0648\u0627\u0633\u0637\u0629 \u0645\u0644\u062d\u0642118827 (Red Hat Update for Exim (RHSA-2010:0970)).\n\n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0646\u0633\u062e\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u06313.15 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629. \u062a\u0635\u062d\u064a\u062d \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0647\u0630\u0647 \u064a\u0645\u0643\u0646 \u062a\u062d\u0645\u064a\u0644\u0647 \u0645\u0646 \u0647\u0646\u0627 git.exim.org. \u0646\u0646\u0635\u062d \u0628\u0640 \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0645\u0643\u0648\u0646 \u0627\u0644\u0645\u062a\u0623\u062b\u0631 \u0628\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629. \u0627\u0644\u062a\u0635\u062d\u064a\u062d \u062a\u0645 \u0646\u0634\u0631\u06472 \u0623\u064a\u0627\u0645 \u0628\u0639\u062f \u0627\u0644\u0627\u0641\u0635\u0627\u062d \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n\n\u0628\u0627\u0644\u0627\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u0647\u0630\u0627 \u064a\u0645\u0643\u0646 \u0627\u0644\u0643\u0634\u0641 \u0648\u0645\u0646\u0639 \u0645\u062b\u0644 \u0647\u0630\u0647 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0639\u0646 \u0637\u0631\u064a\u0642 \u0623\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0646\u0627\u0645\u062c \u062a\u0628\u0646\u0643 \u0628\u0648\u064a\u0646\u062a \u0645\u0639 \u0627\u0644\u0641\u0644\u062a\u0631 \u0647\u0630\u062710824. \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u0630\u0647 \u062a\u0645 \u062a\u0633\u062c\u064a\u0644\u0647\u0627 \u0641\u064a \u0642\u0648\u0627\u0639\u062f \u0628\u064a\u0627\u0646\u0627\u062a \u0622\u062e\u0631\u0649: SecurityFocus (BID 45308), Secunia (SA40019), SecurityTracker (ID 1024858), Vulnerability Center (SBV-28629) , Tenable (68160).\n\n\nhttps://t.me/YCS_CVE", "creation_timestamp": "2021-11-19T16:56:31.000000Z"}, {"uuid": "3d9b571e-4c23-4ace-bea5-624ad14f319b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://t.me/arpsyndicate/1191", "content": "#ExploitObserverAlert\n\nCVE-2010-4344\n\nDESCRIPTION: Exploit Observer has 37 entries related to CVE-2010-4344. Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.\n\nFIRST-EPSS: 0.930690000\nNVD-IS: 10.0\nNVD-ES: 8.6", "creation_timestamp": "2023-12-04T11:27:14.000000Z"}, {"uuid": "08427fbf-8060-40b4-89a5-740fc7b523c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "published-proof-of-concept", "source": "https://t.me/anony_islamicTM/465", "content": "\u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0645 \u0623\u0643\u062a\u0634\u0627\u0641\u0647\u0627 \u0628\u062a\u0627\u0631\u064a\u062e07/12/2010. \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0645 \u0646\u0634\u0631\u0647\u0627 \u0628\u062a\u0627\u0631\u064a\u062e 07/12/2010 \u0643\u0640 RHSA-2010:0970 \u0643\u0640 \u0627\u0633\u062a\u0634\u0627\u0631\u064a (CERT.org). \u064a\u0645\u0643\u0646 \u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u0627\u0633\u062a\u0634\u0627\u0631\u0629 \u0645\u0646 \u0647\u0646\u0627 kb.cert.org.\n\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u0630\u0647 \u062a\u0645 \u062a\u0633\u0645\u064a\u062a\u0647\u0627CVE-2010-4344. \u062a\u0645\u062a \u0625\u062d\u0627\u0644\u0629 \u0627\u0644\u0640 \u0633\u064a \u0641\u064a \u0623\u064a30/11/2010. \u064a\u0645\u0643\u0646 \u0634\u0646 \u0627\u0644\u0647\u062c\u0645\u0629 \u0627\u0644\u0625\u0644\u0643\u062a\u0631\u0648\u0646\u064a\u0629 \u0647\u0630\u0647 \u0639\u0646 \u0628\u0639\u062f. \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u062a\u0642\u0646\u064a\u0629 \u0645\u062a\u0648\u0641\u0631\u0629. \u0627\u0644\u062a\u0642\u0627\u0631\u064a\u0631 \u062a\u0634\u064a\u0631 \u0628\u0623\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u0630\u0647 \u0630\u0627\u062a \u0634\u0647\u0631\u0629 \u0623\u0642\u0644 \u0645\u0646 \u0627\u0644\u0645\u062a\u0648\u0633\u0637. \u0647\u0646\u0627\u0644\u0643 \u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0645\u062a\u0648\u0641\u0631\u0629. \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 \u0627\u0644 \u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0648\u064a\u0645\u0643\u0646 \u0627\u0633\u062a\u062e\u062f\u0627\u0645\u0647\u0627. \u0633\u0639\u0631 \u0627\u0644 \u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0647\u0630\u0647 \u064a\u062a\u0631\u0627\u0648\u062d \u0628\u062d\u0648\u0627\u0644\u064a \u062a\u0642\u0631\u064a\u0628\u0627\u064bUSD $0-$5k \u0641\u064a \u0647\u0630\u0647 \u0627\u0644\u0644\u062d\u0638\u0629.\n\n\u062a\u0645 \u0623\u0639\u062a\u0628\u0631\u0627\u0647\u0627 \u0639\u0644\u0649 \u0623\u0646\u0647\u0627 \u0641\u0639\u0627\u0644\u0629 \u0644\u0644\u063a\u0627\u064a\u0629. \u062a\u0633\u062a\u0637\u064a\u0639 \u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u0625\u0643\u0633\u0628\u0644\u0648\u064a\u062a \u0645\u0646 \u0647\u0646\u0627 securityfocus.com. \u0628\u0645\u0627 \u0623\u0646\u0647\u0627 \u062b\u063a\u0631\u0629 \u0647\u062c\u0648\u0645 \u0641\u0648\u0631\u064a \u0641\u0642\u062f \u0643\u0627\u0646 \u0645\u062a\u0648\u0633\u0637 \u0633\u0639\u0631\u0647\u0627 \u0647\u0648 \u062a\u0642\u0631\u064a\u0628\u0627$0-$5k. \u0628\u0631\u0646\u0627\u0645\u062c \u0646\u064a\u0633\u0648\u0633 \u0644\u0641\u062d\u0635 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u064a\u0648\u0641\u0631 \u0645\u0644\u062d\u0642 \u0628\u0639\u0646\u0648\u0627\u064668160(Oracle Linux 4 / 5 : exim (ELSA-2010-0970)), \u064a\u0645\u0643\u0646\u0643 \u0645\u0646 \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0648\u062c\u0648\u062f \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629. \u0623\u0646\u0647\u0627 \u0645\u0635\u0646\u0641\u0629 \u0625\u0644\u0649 \u0639\u0627\u0626\u0644\u0629Oracle Linux Local Security Checks. \u0627\u0644\u0645\u0644\u062d\u0642 \u064a\u0639\u0645\u0644 \u0628\u062d\u0633\u0628 \u0627\u0644\u0635\u0646\u0641local. \u0648\u0647\u0648 \u064a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u0627\u0644\u0645\u0646\u0641\u06300. \u062e\u062f\u0645\u0629 \u0641\u062d\u0635 \u0627\u0644\u0634\u0628\u0643\u0627\u062a \u0643\u0648\u064a\u0644\u0633 \u064a\u0645\u0643\u0646\u0647\u0627 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0628\u0648\u0627\u0633\u0637\u0629 \u0645\u0644\u062d\u0642118827 (Red Hat Update for Exim (RHSA-2010:0970)).\n\n\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0646\u0633\u062e\u0629 \u0625\u0644\u0649 \u0625\u0635\u062f\u0627\u06313.15 \u064a\u0645\u0643\u0646 \u0623\u0646 \u064a\u062d\u0644 \u0647\u0630\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629. \u062a\u0635\u062d\u064a\u062d \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0647\u0630\u0647 \u064a\u0645\u0643\u0646 \u062a\u062d\u0645\u064a\u0644\u0647 \u0645\u0646 \u0647\u0646\u0627 git.exim.org. \u0646\u0646\u0635\u062d \u0628\u0640 \u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0645\u0643\u0648\u0646 \u0627\u0644\u0645\u062a\u0623\u062b\u0631 \u0628\u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629. \u0627\u0644\u062a\u0635\u062d\u064a\u062d \u062a\u0645 \u0646\u0634\u0631\u06472 \u0623\u064a\u0627\u0645 \u0628\u0639\u062f \u0627\u0644\u0627\u0641\u0635\u0627\u062d \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629.\n\n\u0628\u0627\u0644\u0627\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u0647\u0630\u0627 \u064a\u0645\u0643\u0646 \u0627\u0644\u0643\u0634\u0641 \u0648\u0645\u0646\u0639 \u0645\u062b\u0644 \u0647\u0630\u0647 \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u0639\u0646 \u0637\u0631\u064a\u0642 \u0623\u0633\u062a\u062e\u062f\u0627\u0645 \u0628\u0631\u0646\u0627\u0645\u062c \u062a\u0628\u0646\u0643 \u0628\u0648\u064a\u0646\u062a \u0645\u0639 \u0627\u0644\u0641\u0644\u062a\u0631 \u0647\u0630\u062710824. \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0647\u0630\u0647 \u062a\u0645 \u062a\u0633\u062c\u064a\u0644\u0647\u0627 \u0641\u064a \u0642\u0648\u0627\u0639\u062f \u0628\u064a\u0627\u0646\u0627\u062a \u0622\u062e\u0631\u0649: SecurityFocus (BID 45308), Secunia (SA40019), SecurityTracker (ID 1024858), Vulnerability Center (SBV-28629) , Tenable (68160).\n\n\nhttps://t.me/YCS_CVE", "creation_timestamp": "2021-11-19T16:44:48.000000Z"}, {"uuid": "1dc9e41b-5acd-488b-b3e4-a546e652c5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://t.me/anony_islamicTM/463", "content": "\u0628\u0646\u0643 \u0633\u0648\u0631\u064a \u0645\u0635\u0627\u0628 \u0628\u062b\u063a\u0631\u0647 \u0645\u0646 \u0646\u0648\u0639\ncve2010-4344:\n\n\n\u062a\u0641\u0627\u0635\u064a\u0644 CVE-2010-4344\n\u0627\u0644\u0645\u0639\u062f\u0644\n\u062a\u0645 \u062a\u0639\u062f\u064a\u0644 \u0647\u0630\u0647 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0645\u0646\u0630 \u0623\u0646 \u062a\u0645 \u062a\u062d\u0644\u064a\u0644\u0647\u0627 \u0628\u0648\u0627\u0633\u0637\u0629 NVD. \u0625\u0646\u0647\u0627 \u0641\u064a \u0627\u0646\u062a\u0638\u0627\u0631 \u0625\u0639\u0627\u062f\u0629 \u0627\u0644\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u062a\u064a \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u062a\u063a\u064a\u064a\u0631\u0627\u062a \u0639\u0644\u0649 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0645\u0642\u062f\u0645\u0629.\n\n\u0627\u0644\u0648\u0635\u0641 \u0627\u0644\u062d\u0627\u0644\u064a\n\u062a\u062c\u0627\u0648\u0632 \u0633\u0639\u0629 \u0627\u0644\u0645\u062e\u0632\u0646 \u0627\u0644\u0645\u0624\u0642\u062a \u0627\u0644\u0645\u0633\u062a\u0646\u062f \u0625\u0644\u0649 \u0627\u0644\u0643\u0648\u0645\u0629 \u0641\u064a \u062f\u0627\u0644\u0629 string_vformat \u0641\u064a string.c \u0641\u064a Exim \u0642\u0628\u0644 4.70 \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629 \u0639\u0628\u0631 \u062c\u0644\u0633\u0629 SMTP \u062a\u062a\u0636\u0645\u0646 \u0623\u0645\u0631\u064a\u0646 MAIL \u062c\u0646\u0628\u064b\u0627 \u0625\u0644\u0649 \u062c\u0646\u0628 \u0645\u0639 \u0631\u0633\u0627\u0644\u0629 \u0643\u0628\u064a\u0631\u0629 \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0631\u0624\u0648\u0633 \u0645\u062a\u0642\u0646\u0629 \u060c \u0645\u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0633\u062c\u064a\u0644 \u0631\u0641\u0636 \u063a\u064a\u0631 \u0635\u062d\u064a\u062d.", "creation_timestamp": "2021-11-19T14:55:05.000000Z"}, {"uuid": "f56a6da4-390d-4c7c-a37a-8f50055e5064", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bdb0c1ab-5277-4526-8fe2-4a3c7163d1ff", "content": "", "creation_timestamp": "2026-06-19T12:47:24.973435Z"}, {"uuid": "3a8f0221-7b06-4acb-b23b-ad187e794231", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/749e2985-6186-43df-a818-829a807dbeb9", "content": "", "creation_timestamp": "2026-06-23T14:05:08.735987Z"}, {"uuid": "56c0dbbc-9bac-4acb-9ca9-fd26868c8103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-4344", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/exim4_string_format.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"jduck \", \"hdm \"], \"autofilter_ports\": [25, 465, 587, 2525, 25025, 25000], \"autofilter_services\": [\"smtp\", \"smtps\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a heap buffer overflow within versions of Exim prior to\\n          version 4.69. By sending a specially crafted message, an attacker can corrupt the\\n          heap and execute arbitrary code with the privileges of the Exim daemon.\\n\\n          The root cause is that no check is made to ensure that the buffer is not full\\n          prior to handling '%s' format specifiers within the 'string_vformat' function.\\n          In order to trigger this issue, we get our message rejected by sending a message\\n          that is too large. This will call into log_write to log rejection headers (which\\n          is a default configuration setting). After filling the buffer, a long header\\n          string is sent. In a successful attempt, it overwrites the ACL for the 'MAIL\\n          FROM' command. By sending a second message, the string we sent will be evaluated\\n          with 'expand_string' and arbitrary shell commands can be executed.\\n\\n          It is likely that this issue could also be exploited using other techniques such\\n          as targeting in-band heap management structures, or perhaps even function pointers\\n          stored in the heap. However, these techniques would likely be far more platform\\n          specific, more complicated, and less reliable.\\n\\n          This bug was original found and reported in December 2008, but was not\\n          properly handled as a security issue. Therefore, there was a 2 year lag time\\n          between when the issue was fixed and when it was discovered being exploited\\n          in the wild. At that point, the issue was assigned a CVE and began being\\n          addressed by downstream vendors.\\n\\n          An additional vulnerability, CVE-2010-4345, was also used in the attack that\\n          led to the discovery of danger of this bug. This bug allows a local user to\\n          gain root privileges from the Exim user account. If the Perl interpreter is\\n          found on the remote system, this module will automatically exploit the\\n          secondary bug as well to get root.\", \"disclosure_date\": \"2010-12-07\", \"fullname\": \"exploit/unix/smtp/exim4_string_format\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Exim4 string_format Function Heap Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/smtp/exim4_string_format.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/smtp/exim4_string_format\", \"references\": [\"CVE-2010-4344\", \"CVE-2010-4345\", \"OSVDB-69685\", \"OSVDB-69860\", \"BID-45308\", \"BID-45341\", \"URL-https://seclists.org/oss-sec/2010/q4/311\", \"URL-http://www.gossamer-threads.com/lists/exim/dev/89477\", \"URL-http://bugs.exim.org/show_bug.cgi?id=787\", \"URL-http://git.exim.org/exim.git/commitdiff/24c929a27415c7cfc7126c47e4cad39acf3efa6b\"], \"rport\": 25, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:39.097091Z"}]}