Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #210156

Re: Exim latest update reports to world as 4.89, which the world thinks is vulnerable.

From Andrew McGlashan <andrew.mcglashan@affinityvision.com.au>
Newsgroups linux.debian.user
Subject Re: Exim latest update reports to world as 4.89, which the world thinks is vulnerable.
Date 2019-06-20 20:50 +0200
Message-ID <ybaid-24z-7@gated-at.bofh.it> (permalink)
References <yb5iy-7ue-1@gated-at.bofh.it> <yb5BT-7Bm-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256



On 20/6/19 11:45 pm, Reco wrote:
> Hi.
> 
> On Thu, Jun 20, 2019 at 11:26:08PM +1000, Andrew McGlashan wrote:
>> Is there a way to provide version of "4.92" easily or some other
>> text to stop the likelihood of outsiders trying to pound on and
>> exploit the server? Even though they won't be able to do
>> successfully due to up to date patch status.
> 
> # rgrep banner /etc/exim4/ 
> /etc/exim4/conf.d/main/02_exim4-config_options:# smtp_banner =
> $smtp_active_hostname ESMTP Exim $version_number $tod_full 
> /etc/exim4/exim4.conf.template:# smtp_banner =
> $smtp_active_hostname ESMTP Exim $version_number $tod_full
> 
> Replace v$version_number with 4.92 or set "smtp_banner" to whatever
> you like.

Thank you, I've changed the banner for now.... let's hope that lessens
the problem.

Besides the servers that I look after, it would help if others did the
same so as to lessen any "scare" campaigns based on false data from
Shodan.  Obviously many less servers are really vulnerable than the
figures are currently suggesting.

Kind Regards
AndrewM
-----BEGIN PGP SIGNATURE-----

iHUEAREIAB0WIQTJAoMHtC6YydLfjUOoFmvLt+/i+wUCXQvTBwAKCRCoFmvLt+/i
+5i6AQDTFMANdum/LJEdlO/YoWbU6Yq+/Fl72OGnWUdkI84riQD/V+QZV21/8cKw
Of9Ob0jKTdTBRPb6ys65dnuwjljH4lQ=
=yTQa
-----END PGP SIGNATURE-----

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Exim latest update reports to world as 4.89, which the world thinks  is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 15:30 +0200
  Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Greg Wooledge <wooledg@eeg.ccf.org> - 2019-06-20 15:50 +0200
  Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-20 15:50 +0200
    Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 20:50 +0200
      Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-20 21:00 +0200
        Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 21:50 +0200
          Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-20 22:00 +0200
            Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 22:40 +0200
              Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-21 00:00 +0200
                Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Michael Stone <mstone@debian.org> - 2019-06-21 00:00 +0200
              Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Reco <recoverym4n@enotuniq.net> - 2019-06-21 08:10 +0200
                Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-21 13:20 +0200
                Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-21 21:00 +0200
  Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-20 16:00 +0200
    Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andrew McGlashan <andrew.mcglashan@affinityvision.com.au> - 2019-06-20 20:20 +0200
      Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Brian <ad44@cityscape.co.uk> - 2019-06-20 21:50 +0200
        Re: Exim latest update reports to world as 4.89, which the world  thinks is vulnerable. Andy Smith <andy@strugglers.net> - 2019-06-22 21:10 +0200

csiph-web