CVE-2010-4344
🗓️ 14 Dec 2010 15:00:00Reported by redhatType 
cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1422 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 65 |
|---|---|---|---|---|
 | Exim < 4.70 string_format Function Remote Overflow | 15 Dec 201000:00 | – | nessus |
| CentOS 4 : exim (CESA-2010:0970) | 28 Jan 201100:00 | – | nessus |
| Debian DSA-2131-1 : exim4 - arbitrary code execution | 12 Dec 201000:00 | – | nessus |
| Exim string_format Function Remote Overflow | 15 Dec 201000:00 | – | nessus |
| GLSA-201401-32 : Exim: Multiple vulnerabilities | 28 Jan 201400:00 | – | nessus |
| Oracle Linux 5 : exim (ELSA-2010-0970) | 12 Jul 201300:00 | – | nessus |
| RHEL 4 / 5 : exim (RHSA-2010:0970) | 12 Dec 201000:00 | – | nessus |
| Scientific Linux Security Update : exim on SL4.x, SL5.x i386/x86_64 | 1 Aug 201200:00 | – | nessus |
| openSUSE Security Update : exim (openSUSE-SU-2010:1052-1) | 5 May 201100:00 | – | nessus |
| openSUSE Security Update : exim (openSUSE-SU-2010:1052-1) | 5 May 201100:00 | – | nessus |
10
Node
Node
OR
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| MAIL FROM | request body | smtp/25 | Exim heap-based buffer overflow via SMTP session with a large message and crafted headers (CVE-2010-4344). | CWE-787 |
| RCPT TO | request body | smtp/25 | Exim heap-based buffer overflow via SMTP session with a large message and crafted headers (CVE-2010-4344). | CWE-787 |
| DATA | request body | smtp/25 | Exim heap-based buffer overflow via SMTP session with a large message and crafted headers (CVE-2010-4344). | CWE-787 |
| Message body (crafted headers) | request body | smtp/25 | Exim heap-based buffer overflow via SMTP session with a large message and crafted headers (CVE-2010-4344). | CWE-787 |
| HeaderX | header | smtp/25 | Exim header injection leading to remote command execution via injected header payload (as demonstrated by the PoC). | CWE-787 |
| Header payload containing ${run{/bin/sh -c \"...shell execution payload...\"}} | header | smtp/25 | Exim header injection leading to remote command execution via injected header payload (as demonstrated by the PoC). | CWE-787 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:24Current
9.7Critical risk
Vulners AI Score9.7
CVSS 29.3
CVSS 3.19.8
EPSS0.71706
SSVC