PT-2018-1057 · Exim +3 · Exim +3

🗓️ 05 Feb 2018 00:00:00Reported by Positive TechnologiesType

Exim prior to 4.90.1 has a buffer overflow issue in SMTP listener allowing remote code execution.

Reporter	Title	Published	Views	Family All 1037
0day.today	Exim 4.84-3 - Privilege Escalation	9 Mar 201600:00	–	zdt
0day.today	Exim < 4.86.2 - Privilege Escalation	10 Mar 201600:00	–	zdt
0day.today	Exim - 'perl_startup' Privilege Escalation (Metasploit)	15 Apr 201600:00	–	zdt
0day.today	Exim 4.89 - BDAT Denial of Service Exploit	27 Nov 201700:00	–	zdt
0day.today	Exim Use-After-Free Exploit	30 Nov 201700:00	–	zdt
0day.today	Exim < 4.90.1 - base64d Remote Code Execution Exploit	2 May 201800:00	–	zdt
0day.today	exim 4.90 - Remote Code Execution Exploit	24 Oct 201800:00	–	zdt
0day.today	Exim 4.87 < 4.91 - (Local / Remote) Command Execution Exploit	7 Jun 201900:00	–	zdt
0day.today	Exim 4.91 Local Privilege Escalation Exploit	17 Jun 201900:00	–	zdt
0day.today	Exim 4.87 / 4.91 - Local Privilege Escalation Exploit	23 Aug 201900:00	–	zdt

Source	Link
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/exim4_deliver_message_priv_esc.rb
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/local/exim_perl_startup.rb
github	www.github.com/qazbnm456/awesome-cve-poc/blob/master/Stack-Clash.md
github	www.github.com/synacktiv/Exim-CVE-2019-15846
github	www.github.com/LetUsFsck/PoC-Exploit-Mirror/tree/master/CVE-2017-16944
github	www.github.com/cowbe0x004/eximrce-CVE-2019-10149
github	www.github.com/Diefunction/CVE-2019-10149
github	www.github.com/MNEMO-CERT/PoC--CVE-2019-10149_Exim
github	www.github.com/AzizMea/CVE-2019-10149-privilege-escalation
github	www.github.com/martinclauss/exim-rce-cve-2018-6789

30 Jul 2025 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 210

CVSS 39 - 9.8

CVSS 3.19.8

EPSS0.99961