CVE-2005-0021

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2005

exim

buffer overflow

security vulnerability

arbitrary code execution

7.6 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.7%

JSON

Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.

CPENameOperatorVersion
university_of_cambridge:eximuniversity of cambridge eximeq4.41
university_of_cambridge:eximuniversity of cambridge eximeq4.42
university_of_cambridge:eximuniversity of cambridge eximle4.40

CPE	Name	Operator	Version
university_of_cambridge:exim	university of cambridge exim	eq	4.41
university_of_cambridge:exim	university of cambridge exim	eq	4.42
university_of_cambridge:exim	university of cambridge exim	le	4.40