CVE-2017-18396: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

PT-2019-8331

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows arbitrary file-read operations via Exim vdomainaliases. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to resolve the issue...

CVE-2018-20936

cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

Design/Logic Flaw

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14404

CVE-2019-14404 affects cPanel prior to 78.0.18, permitting certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). Impact is information disclosure; no exploit details provided beyond this. Remediation: upgrade to cPanel 78.0.18 or later (p...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14388

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

CVE-2019-14388

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

Design/Logic Flaw

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

CVE-2019-14388

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

CVE-2019-14388

CVE-2019-14388 affects cPanel prior to 82.0.2, allowing unauthenticated file creation due to mishandled Exim log parsing (SEC-507). Root cause: improper handling of Exim logs enables file creation without authentication. Impact: unauthorized file creation; no explicit exploitation details provide...

PT-2019-13657

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.2 Description The issue arises from mishandled Exim log parsing, allowing unauthenticated file creation. Recommendations For versions prior to 82.0.2, update to version 82.0.2 or later to resolve the issue...

CVE-2019-14404: Undefined Security Weakness

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14388: Undefined Security Weakness

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

PT-2019-13673

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 78.0.18 Description The issue allows certain file-read operations in the context of the root account via the Exim virtual user spam router. Recommendations For versions prior to 78.0.18, update to version 78.0.18 or...

Exim deliver_message() Function Remote Command Execution Vulnerability (Remote)

Binary data eximdelivermessagecmdexec.nbin...

Exim 4.85 - 4.92 RCE Vulnerability

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...

Exim 4.92 < 4.92.3 RCE Vulnerability

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...