CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

Design/Logic Flaw

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

CVE-2021-38371

CVE-2021-38371 affects Exim (STARTTLS) up to version 4.94.2. The vulnerability allows response injection (buffering) during MTA SMTP sending due to how STARTTLS sync point is enforced on the client side. Affected products include Exim in various distributions (Debian/Ubuntu/Amazon Linux/Alpine/Op...

CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

CVE-2021-38371: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

Exim 注入漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability in the STARTTLS feature in Exim up to 4.94.2 allows an attacker to perform response injection buffering during MTA SMTP delivery...

PT-2021-7698 · Exim +4 · Exim +4

Name of the Vulnerable Software and Affected Versions: Exim versions through 4.94.2 Description: The issue is related to the STARTTLS feature in Exim, which allows response injection during MTA SMTP sending. This is due to insufficient neutralization of special elements in the request. The...

Qualys Research Wins Two 2021 Pwnie Awards

The Qualys Research team won two Pwnie Awards today at Black Hat USA 2021 for discovering and responsibly disclosing these new vulnerabilities: Best Privilege Escalation Bug and Most Under-Hyped Research. The Qualys Research team received these awards: Best Privilege Escalation Bug Heap-based...

Exim base64d Buffer Overflow Exploit

!/usr/bin/python import sys import time import socket import struct s = None f = None def logo: print print " CVE-2018-6789 Poc Exploit" print "@straightblast ; email protected" print def connecthost, port: global s global f s = socket.createconnectionhost,port f = s.makefile'rw', bufsize=0 def p...

Exim base64d Buffer Overflow

!/usr/bin/python import sys import time import socket import struct s = None f = None def logo: print print " CVE-2018-6789 Poc Exploit" print "@straightblast ; [email protected]" print def connecthost, port: global s global f s = socket.createconnectionhost,port f = s.makefile'rw', bufsize=0...

Exim pdkim_finish_bodyhash Buffer Overflow Info Disclosure

The vulnerability of the pdkimfinishbodyhash function in the Exim message transport agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

Exim integer overflow RCE

The vulnerability of the receiveaddrecipient function in the Exim message forwarding agent is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Exim queue_run Privilege Escalation

The vulnerability of the queuerun function in the Exim message transport agent is related to buffer overflow in the “queue”. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

Exim Heap Buffer Overflow Privilege Escalation

The vulnerability of the main function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

Exim Input Validation

The vulnerability of the Exim message transfer agent is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary commands...

Exim get_stdinput() Integer Overflow Privilege Escalation

The vulnerability of the getstdinput function in the Exim message forwarding agent is related to integer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

Exim Privilege Escalation

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...