Remote root Exim vulnarability, will there be an update from DA?

I just upgraded to Exmin 4.72 with custombuild. Do i need to do more or is it safe now?
 
Should be safe then, but just to bu sure I used the manual upgrade, so I could put the 2 lines in the Makefile.
 
Richard G said:
Should be safe then, but just to bu sure I used the manual upgrade, so I could put the 2 lines in the Makefile.
Click to expand...
Is there a post somewhere showing that CustomBuild now includes those 2 lines in the makefile? If so, I'm somehow missing it.

Jeff
 
@Jlasman: i wouldn't know because I haven't checked.
I've seen that some files were added in the /etc/virtual directory. I got the line from the DA help link:
Directadmin said:
To make use of the newest exim settings and enhancements, you can update your exim.conf by running the following as root:
Click to expand...
So there must be some new settings and enhancements, correct?

Is there a post somewhere showing that CustomBuild now includes those 2 lines in the makefile?
Click to expand...
No but there are several comments that the problem would only occur on Exim versions lower then 4.72, also on a Dutch forum.
There is neither a post somewhere that the custombuild 1.2 would have this included in the makefile, but that -is- given as being a solution which is oke. My statement makes it clear that it can only be done manual at this time.

At this point I didn't see any posts which confirmed that the bugs would still apply to version 4.72 too.
If yes, then I decently wonder why nobody else has replyed to that before.
 
Makefile options

Using all three options may be best:

ALT_CONFIG_ROOT_ONLY=yes
ALT_CONFIG_PREFIX=/etc
DISABLE_D_OPTION=yes
 
Wunk said:
For the people running into some issues with installing the centos src.rpm, some copy/paste ready scripts:
CentOS 5.x
Code: 
cd /usr/local/directadmin/scripts/packages
wget http://files.directadmin.com/services/da_exim-4.72-1.src.rpm
yum -y install pcre pcre-devel
rpmbuild --rebuild --force da_exim-4.72-1.src.rpm && rpm -Uvh /usr/src/redhat/RPMS/*/da_exim-4.72-1.*.rpm
/etc/init.d/exim restart
Click to expand...


error
PHP: 
gcc exim_dbmbuild.c
In file included from exim.h:438,
                 from exim_dbmbuild.c:33:
dbstuff.h:103:16: error: db.h: No such file or directory
In file included from exim.h:438,
                 from exim_dbmbuild.c:33:
dbstuff.h:540: error: expected specifier-qualifier-list before ‘DB’
exim_dbmbuild.c: In function ‘main’:
exim_dbmbuild.c:150: error: ‘DB’ undeclared (first use in this function)
exim_dbmbuild.c:150: error: (Each undeclared identifier is reported only once
exim_dbmbuild.c:150: error: for each function it appears in.)
exim_dbmbuild.c:150: error: ‘d’ undeclared (first use in this function)
exim_dbmbuild.c:151: error: ‘DBT’ undeclared (first use in this function)
exim_dbmbuild.c:151: error: expected ‘;’ before ‘key’
exim_dbmbuild.c:213: error: ‘DB_HASH’ undeclared (first use in this function)
exim_dbmbuild.c:295: error: ‘content’ undeclared (first use in this function)
exim_dbmbuild.c:298: error: ‘key’ undeclared (first use in this function)
exim_dbmbuild.c:298: error: ‘R_NOOVERWRITE’ undeclared (first use in this function)
make[1]: *** [exim_dbmbuild.o] Error 1
make[1]: Leaving directory `/usr/src/redhat/BUILD/da_exim-4.72/build-Linux-i386'
make: *** [all] Error 2
error: Bad exit status from /var/tmp/rpm-tmp.77109 (%build)


RPM build errors:
    Bad exit status from /var/tmp/rpm-tmp.77109 (%build)
 
propcgamer said:
These directions worked fine for me on a centos 4 box.
Click to expand...

Hello all,

1) I tried to build from tar.gz source and edited the Local/Makefile to put the 3 lines :
ALT_CONFIG_PREFIX=/etc
DISABLE_D_OPTION=yes
ALT_CONFIG_ROOT_ONLY=yes

but the exim -D and exim -C e.conf did not show -D not available in this exim binary nor Permission denied.
How do you do? Is there an exim command line option to show the options to build it?

2) Build from src.rpm: Could someone tell me how to edit the da-Makefile mentioned? I assume I need to extract the src.rpm first, edit it, then rebuild src and install with the snippet given by some one in this forum.

Thank you all.
 
What if someone could just post a guide to help everybode compile Exim from source. I am going to build in about 12 hours, if nobody posted a guide, I'll make one for everybody in the DA community.


Here is to get you started :)
Code: 
wget http://files.directadmin.com/services/da_exim-4.72-1.src.rpm
rpmbuild --rebuild --force da_exim-4.72-1.src.rpm
rpm -Uvh /usr/src/redhat/RPMS/i386/da_exim-4.72-1.i386.rpm
/sbin/service exim restart
 
Last edited:
Hello again,

During the rpm rebuild of src.rpm on CentOS 4.8, I got the following error due to pcre.h not found:
gcc exim_dbmbuild.c
In file included from exim_dbmbuild.c:33:
exim.h:430:18: pcre.h: No such file or directory
In file included from exim.h:440,
from exim_dbmbuild.c:33:
globals.h:78: error: syntax error before '*' token
globals.h:78: warning: data definition has no type or storage class

# yum list pcre*
Setting up repositories
Reading repository metadata in from local files
Installed Packages
pcre.i386 4.5-4.el4_6.6 installed
pcre-devel.i386 4.5-4.el4_6.6 installed

# yum provides pcre.h
Searching Packages:
Setting up repositories
update 100% |=========================| 951 B 00:00
base 100% |=========================| 1.1 kB 00:00
addons 100% |=========================| 951 B 00:00
extras 100% |=========================| 1.1 kB 00:00
Reading repository metadata in from local files
Importing Additional filelist information for packages


pcre-devel.i386 4.5-4.el4_6.6 base
Matched from:
/usr/include/pcre/pcre.h


pcre-devel.i386 4.5-4.el4_6.6 installed
Matched from:
/usr/include/pcre/pcre.h
Click to expand...

It is strange, since pcre* package are installed, and pcre.h exists.
Any idea? Maybe exim.h need to use #include "pcre.h" instead of #include <pcre.h>?
I am stuck now :-(.
 
lilas said:
Hello again,

During the rpm rebuild of src.rpm on CentOS 4.8, I got the following error due to pcre.h not found:


It is strange, since pcre* package are installed, and pcre.h exists.
Any idea? Maybe exim.h need to use #include "pcre.h" instead of #include <pcre.h>?
Click to expand...

I found a bypass by setting a symbolic link:
ln -s /usr/include/pcre/pcre.h /usr/include/pcre.h
 
Another question: How to hide Exim signature from nmap scan?

I already edited /etc/exim.conf to use
smtp_banner = "SMTP"
(refer to http://www.directadmin.com/forum/showthread.php?t=20689 )
to hide Exim version.

but the "nmap -v -A myserver.example.com" command still recognizes Exim as
SMTP server, as this result:

587/tcp open smtp Exim smtpd


How can I completely hide this information from nmap?
 
You must log in or register to reply here.
Back
Top