CVE-2016-9963

Published Feb 1, 2017

Last updated 13 days ago

Overview

Description
Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.
Source
cve@mitre.org
NVD status
Modified
Products
exim, ubuntu_linux, debian_linux

Risk scores

CVSS 3.0

Type
Primary
Base score
5.9
Impact score
3.6
Exploitability score
2.2
Vector string
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity
MEDIUM

CVSS 2.0

Type
Primary
Base score
2.6
Impact score
2.9
Exploitability score
4.9
Vector string
AV:N/AC:H/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov
CWE-320

Social media

Hype score
Not currently trending

Configurations