CVE:CVE-2011-1764
CNNVD:CNNVD-201105-108
Exim是英国剑桥大学开发的一个运行于Unix系统中的开源消息传送代理（MTA），它主要负责邮件的路由、转发和投递。
Exim "dkim_exim_verify_finish()"在实现上存在格式字符串漏洞。此漏洞源于在处理包含格式字符串说明符时，src/dkim.c中的"dkim_exim_verify_finish()"函数中存在格式字符串错误，通过发送带有特制"DKIM-Signature:" 标头的电子邮件造成崩溃或内存破坏。
solution:Upgrade exim exim to a higher version than 4.75,2.10,2.11,2.12,3.00,3.01,3.02,3.03,3.10,3.11,3.12,3.13,3.14,3.15,3.16,3.20,3.21,3.22,3.30,3.31,3.32,3.33,3.34,3.35,3.36,4.00,4.01,4.02,4.03,4.04,4.05,4.10,4.11,4.12,4.14,4.20,4.21,4.22,4.23,4.24,4.30,4.31,4.32,4.33,4.34,4.40,4.41,4.42,4.43,4.44,4.50,4.51,4.52,4.53,4.54,4.60,4.61,4.62,4.63,4.64,4.65,4.66,4.67,4.68,4.69,4.70,4.71,4.72,4.73,4.74,and avoid the version (,4.75],2.10,2.11,2.12,3.00,3.01,3.02,3.03,3.10,3.11,3.12,3.13,3.14,3.15,3.16,3.20,3.21,3.22,3.30,3.31,3.32,3.33,3.34,3.35,3.36,4.00,4.01,4.02,4.03,4.04,4.05,4.10,4.11,4.12,4.14,4.20,4.21,4.22,4.23,4.24,4.30,4.31,4.32,4.33,4.34,4.40,4.41,4.42,4.43,4.44,4.50,4.51,4.52,4.53,4.54,4.60,4.61,4.62,4.63,4.64,4.65,4.66,4.67,4.68,4.69,4.70,4.71,4.72,4.73,4.74