[ SEA-GHOST MINI SHELL]

#!/bin/bash
#This script check exim for CVE-2019-10149 vulnerability
EXIM_VERSION=$(/usr/sbin/exim --version 2>/dev/null | grep 'Exim version' | awk {'print $3'}| awk -F '_' {'print $1'})

if [ ! -z "$EXIM_VERSION" ] ; then
   #Exim installed
   EXIM_INT_VERSION=$(echo "$EXIM_VERSION" | sed s/\\.//)
   if [ "$EXIM_INT_VERSION" -ge 487 -a "$EXIM_INT_VERSION" -le 491 ]; then
      if [ -f /usr/bin/yum ]; then
         rpm -q --changelog exim | grep -q CVE-2019-10149
         if [ $? -eq 0 ]; then
            #Exim is patched
            echo "0"
            exit 0
         else
            #Exim package vulnerable
            echo "1"
            exit 2
         fi
      elif [ -f /usr/bin/apt-get ]; then
         apt-get changelog exim4 | grep -q CVE-2019-10149
         if [ $? -eq 0 ]; then
            #Exim is patched
            echo "0"
            exit 0
         else
            #Exim package vulnerable
            echo "1"
            exit 2
         fi
      else
         #Can not determine linux distro
         echo "4"
         exit 1
      fi
   else
      #Not vulnerable exim version
      echo "0"
      exit 0
   fi
else
   #Exim is not installed
   echo "3"
   exit 0
fi