2632 matches found
Exim < 4.92.2 RCE Vulnerability
Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...
[ASA-201909-3] exim: arbitrary command execution
Arch Linux Security Advisory ASA-201909-3 ========================================= Severity: Critical Date : 2019-09-06 CVE-ID : CVE-2019-15846 Package : exim Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-1037 Summary ======= The package exim before...
Exim Releases Security Patches
Exim has released patches to address vulnerabilities affecting Exim 4.92.1 and prior versions. A remote attacker could exploit this vulnerability to take control of an affected email server. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review th...
CVE-2019-15846
creationtimestamp| type| source ---|---|--- 2019-09-05 10:54:15+00:00| seen| https://t.me/winitproru/143 2019-09-06 11:04:18+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/942 2019-09-06 11:09:16+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/943 2019-09-06...
PT-2019-3248
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.92.2 Description The issue is related to errors in object handling in memory, allowing a remote attacker to gain access to confidential data, disrupt its integrity, and cause a denial of service. It also allows remote...
Exim CVE-2019-15846 Arbitrary Code Execution Vulnerability
Description Exim is prone to an arbitrary code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with root privileges. Exim versions 4.8 through 4.92.1 are vulnerable. Technologies Affected Exim Exim 4.80 Exim Exim 4.80.1 Exim Exim 4.82 Exim Exim 4.82.1 Exim Ex...
Exim -- RCE with root privileges in TLS SNI handler
Exim developers report: If your Exim server accepts TLS connections, it is vulnerable. This does not depend on the TLS libray, so both, GnuTLS and OpenSSL are affected. The vulnerability is exploitable by sending a SNI ending in a backslash-null sequence during the initial TLS handshake. The...
Exim 4.87 / 4.91 - Local Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'expect' class MetasploitModule 'Exim 4.87 - 4.91 Local Privilege Escalation', 'Description' = %q This module exploits a flaw in Exim versions 4.87 to 4.91...
Exim 4.87 / 4.91 - Local Privilege Escalation Exploit
This Metasploit module exploits a flaw in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to command execution with root privileges. This module requires Metasploit: https://metasploit.com/download Current source...
Exim 4.91 Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'expect' class MetasploitModule 'Exim 4.87 - 4.91 Local Privilege Escalation', 'Description' = %q This module exploits a flaw in Exim versions 4.87 to 4.91...
Exim < 4.92.1 Input-Validation RCE
According to its banner, the version of Exim running on the remote host is prior to 4.92.1. It is, therefore, potentially affected an input-validation flaw in the '$sort ' expansion. A remote attacker could potentially execute arbitrary code. Note that the default configuration does not include...
The vulnerability of the Exim mail server, related to errors in memory object processing, allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the Exim mail server is related to errors in memory object processing. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...
openSUSE Security Update : exim (openSUSE-2019-1812)
This update for exim fixes the following issues : - CVE-2019-13917: Fixed an issue with $sort expansion which could allow remote attackers to execute other programs with root privileges boo1142207. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
The vulnerability of the deliver_message() function (/src/deliver.c) in the Exim mail server allows a hacker to execute arbitrary code.
The vulnerability of the delivermessage function /src/deliver.c in the Exim mail server is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2017-18477
In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...
CVE-2017-18474
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...
CVE-2017-18475
In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...
CVE-2017-18475
In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...