Code injection

cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...

Design/Logic Flaw

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...

Code injection

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...

CVE-2017-18477

CVE-2017-18477 : Affects cPanel before 62.0.4 where Exim transports could execute in the context of the nobody account (SEC-206). Root cause described as a context execution issue within Exim transports. Impact: potential privilege context exposure/run as nobody; document does not quantify additi...

CVE-2017-18477

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...

CVE-2017-18475

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...

CVE-2017-18475

CVE-2017-18475 affects cPanel before 62.0.4. Exim piped filters run in the context of an incorrect user account when delivering to a system user (SEC-204). CVSS v3.0 base score 8.8 (HIGH) indicates potentially high impact on confidentiality, integrity and availability. Upgrade to cPanel 62.0.4 or...

CVE-2017-18474

CVE-2017-18474 affects cPanel before 62.0.4. The issue allows arbitrary file-read operations via Exim valiases, due to an improper handling path/resource filtering. Public descriptions consistently show impact as reading restricted files. Connected documents confirm the product/version and the un...

CVE-2017-18474

cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...

PT-2019-8410

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue arises in cPanel when Exim piped filters are used for delivering to a system user, resulting in the filters running in the context of an incorrect user account. Recommendations For versions...

CVE-2017-18477: Undefined Security Weakness

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...

CVE-2017-18475: Improper Input Validation

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...

PT-2019-8409

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue allows arbitrary file-read operations via Exim valiases. Recommendations For versions prior to 62.0.4, update to version 62.0.4 or later to resolve the issue...

PT-2019-8412

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue allows Exim transports to execute in the context of the nobody account. Recommendations For versions prior to 62.0.4, update to version 62.0.4 or later to resolve the issue...

CVE-2017-18474: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...

[ASA-201908-4] exim: arbitrary code execution

Arch Linux Security Advisory ASA-201908-4 ========================================= Severity: Critical Date : 2019-08-05 CVE-ID : CVE-2019-13917 Package : exim Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1011 Summary ======= The package exim before versi...

CVE-2017-18396

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

CVE-2017-18396

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

Design/Logic Flaw

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

CVE-2017-18396

The CVE-2017-18396 issue affects cPanel before 68.0.15, where Exim vdomainaliases enables arbitrary file-read operations. Root cause: improper handling in vdomainaliases leads to access to restricted files. Impact: potential disclosure of sensitive data on affected systems. Evidence from Red Hat ...