2627 matches found
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
DEBIAN-CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
Remote code execution
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
CVE-2019-13917
Exim (MTA) versions 4.85–4.92 are affected by CVE-2019-13917, which allows remote code execution as root in certain configurations that enable the ${sort } expansion (e.g., manipulated $local_part or $domain). The issue is fixed in version 4.92.1. In affected setups, a remote attacker could explo...
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
USN-4075-1: Exim vulnerability
Jeremy Harris discovered that Exim incorrectly handled sort expansions. In environments where sort expansions are used, a remote attacker could possibly use this issue to execute arbitrary code as root...
USN-4075-1 exim4 vulnerability
Jeremy Harris discovered that Exim incorrectly handled sort expansions. In environments where sort expansions are used, a remote attacker could possibly use this issue to execute arbitrary code as root...
UBUNTU-CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
CVE-2019-13917
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
Exploit for OS Command Injection in Exim
StickyExim !https://bretstaton.com/images/articleimages/ex...
CVE-2019-13917: Undefined Security Weakness
Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...
Important: exim
Issue Overview: Exim allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain. CVE-2019-13917 Affected Packages: exim Issue Correction: Run yum update exim or yum update --advisory...
Exim Code Issue Vulnerability
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A code issue vulnerability exists in Exim versions 4.85 through 4.92, which can be exploited by an attacker to run code...
PT-2019-2908
Name of the Vulnerable Software and Affected Versions Exim versions 4.85 through 4.92 Description The issue is related to errors in handling objects in memory, which can allow an attacker to elevate privileges and execute arbitrary code. This can occur in unusual configurations where the $sort...
Exim -- RCE in ${sort} expansion
Exim team report: A local or remote attacker can execute programs with root privileges - if you've an unusual configuration. If your configuration uses the $sort expansion for items that can be controlled by an attacker e.g. $localpart, $domain. The default config, as shipped by the Exim...