PT-2020-6050

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to an out-of-bounds read in the pdkim finish bodyhash function. This occurs because the function does not properly validate the relationship between sig-bodyhash.len and b-bh.len. ...

PT-2020-6044

Name of the Vulnerable Software and Affected Versions Exim versions 4 through 4.94.1 Exim version 4.94.2 is not affected, so all versions prior to 4.94.2 are considered vulnerable. Description The issue is related to insufficient input validation in the Exim message relay agent. This can be...

PT-2020-6036

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to errors in privilege management. It allows an attacker to potentially elevate privileges in the system by exploiting the vulnerability, which can lead to a denial of service...

PT-2020-6047

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to improper restriction of write operations within the bounds of a memory buffer when processing name=value pairs within MAIL FROM and RCPT TO commands. This can be exploited by a...

PT-2020-6039

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to insufficient input validation in the Exim message relay agent, which can be exploited to bypass security restrictions and execute arbitrary commands. Local users can alter the...

PT-2020-6042

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to privilege management errors in the Exim message relay agent. Exploitation of this issue may allow an attacker to elevate their privileges in the system. Specifically, because Ex...

HPESBST04034 rev.1 - HPE 3PAR Service Processor, Using Exim Mail Transfer Agent (MTA), Remote Command Execution.

Potential Security Impact: Remote: Arbitrary Command Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE 3PAR Service Processor 5.0.6 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-10149 |...

cPanel code issue vulnerability (CNVD-2020-54919)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 88.03, which stems from the incorrect handling of Exim filter paths a...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

Design/Logic Flaw

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26098

CVE-2020-26098 affects cPanel prior to 88.0.3, where improper handling of the Exim filter path enables remote code execution (SEC-485). The issue is confirmed across multiple connected sources (RH CVE, CNVD, NVD, CVE listing, EUVD, PRION) and is characterized by a high/critical impact vector with...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

EUVD-2020-18728

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

PT-2020-16281

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 88.0.3 Description The issue is related to the mishandling of the Exim filter path, which can lead to remote code execution. Recommendations For versions prior to 88.0.3, update to version 88.0.3 or later to resolve th...

CVE-2020-26098: Undefined Security Weakness

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

Arbitrary Code Execution

sa-exim is vulnerable to arbitrary code execution. The vulnerability exists through the reliance of eval by Greylisting.pm, rather than direct parsing and/or use of the taint feature...

Ubuntu: Security Advisory (USN-4520-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4520-1: Exim SpamAssassin vulnerability

It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code. CVE-2019-19920...

USN-4520-1 sa-exim vulnerability

It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code. CVE-2019-19920...