This bug in exim (http://www.securityfocus.com/archive/1/335790) has been fixed in version 3.36-8 in unstable I see but there doesn't yet seem to have been any mention of it also being fixed for woody. The discoverer notes:
"it's possible that this will prove to be exploitable for arbitrary command execution on some platforms in some circumstances." so i'm hoping there might be a security update for 3.35 in woody released soon. Thanks, Stephen Quinney
pgpkBJQAgOk7J.pgp
Description: PGP signature