Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #210162

Re: Exim latest update reports to world as 4.89, which the world thinks is vulnerable.

Show all headers | View raw

	Hi.

On Fri, Jun 21, 2019 at 04:40:11AM +1000, Andrew McGlashan wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> 
> 
> On 20/6/19 11:45 pm, Reco wrote:
> > Hi.
> > 
> > On Thu, Jun 20, 2019 at 11:26:08PM +1000, Andrew McGlashan wrote:
> >> Is there a way to provide version of "4.92" easily or some other
> >> text to stop the likelihood of outsiders trying to pound on and
> >> exploit the server? Even though they won't be able to do
> >> successfully due to up to date patch status.
> > 
> > # rgrep banner /etc/exim4/ 
> > /etc/exim4/conf.d/main/02_exim4-config_options:# smtp_banner =
> > $smtp_active_hostname ESMTP Exim $version_number $tod_full 
> > /etc/exim4/exim4.conf.template:# smtp_banner =
> > $smtp_active_hostname ESMTP Exim $version_number $tod_full
> > 
> > Replace v$version_number with 4.92 or set "smtp_banner" to whatever
> > you like.
> 
> Thank you, I've changed the banner for now.... let's hope that lessens
> the problem.

Please share the results if possible.

On this particular MTA I've counted whopping 4 attempts to exploit
CVE-2019-10149 so far. One made from France, three from US.
I'm kind of disappointed, I've expected half a million Chineese and
Russian bots at least ;)

Reco

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Exim latest update reports to world as 4.89, which the world thinks  is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 15:30 +0200
  Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-20 15:50 +0200
  Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-20 15:50 +0200
    Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 20:50 +0200
      Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-20 21:00 +0200
        Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 21:50 +0200
          Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-20 22:00 +0200
            Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 22:40 +0200
              Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-21 00:00 +0200
                Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Michael Stone <mstone@debian.org> - 2019-06-21 00:00 +0200
              Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-21 08:10 +0200
                Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-21 13:20 +0200
                Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-21 21:00 +0200
  Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-20 16:00 +0200
    Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 20:20 +0200
      Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-20 21:50 +0200
        Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andy Smith <andy@strugglers.net> - 2019-06-22 21:10 +0200

csiph-web