2626 matches found
CVE-2019-19920
sa-exim 4.2.1 allows attackers to execute arbitrary code if they can write a .cf file or a rule. This occurs because Greylisting.pm relies on eval rather than direct parsing and/or use of the taint feature. This issue is similar to CVE-2018-11805...
CVE-2019-14404
cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...
CVE-2019-14388
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
CVE-2018-20936
cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...
The vulnerability of the Exim mail server, related to the use of memory after it is freed, allows attackers to increase their privileges.
The vulnerability of the Exim mail server is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20250417-07
Exim mail server vulnerability is related to memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker to escalate his privileges...
[SECURITY] Fedora 42 Update: exim-4.98.2-1.fc42
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Exim Use-After-Free Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Exim. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the dp command...
Fedora: Security Advisory (FEDORA-2025-3a56fe6159)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: exim-4.98.2-1.fc40
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
[SECURITY] Fedora 41 Update: exim-4.98.2-1.fc41
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Fedora 40 : exim (2025-3a56fe6159)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3a56fe6159 advisory. This is an update fixing CVE 2025-30232. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
Fedora 41 : exim (2025-ab7148736c)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-ab7148736c advisory. This is an update fixing CVE 2025-30232. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
ROS-20250403-03
Vulnerability of SQLite hints and ETRN serialization functions of Exim mail server is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sendi...
exim-4.98.2-1.1 on GA media (moderate)
exim-4.98.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:14935-1 Rating: moderate Cross-References: CVE-2025-26794 CVE-2025-30232 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in the...
CVE-2025-30232
A use-after-free in Exim 4.96 through 4.98.1 could allow users with command-line access to escalate privileges...
DEBIAN-CVE-2025-30232
A use-after-free in Exim 4.96 through 4.98.1 could allow users with command-line access to escalate privileges...
CVE-2025-30232: Use After Free
A use-after-free in Exim 4.96 through 4.98.1 could allow users with command-line access to escalate privileges...
Exim 安全漏洞
Exim is an open source messaging agent MTA running on Unix systems from Exim Open Source, which is responsible for routing, forwarding and delivering mail. A security vulnerability exists in Exim versions 4.96 through 4.98.1, which stems from reuse after release and could lead to elevation of...