370 matches found
PT-2022-6994
Name of the Vulnerable Software and Affected Versions Exim affected versions not specified Description This issue allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this issue. The specific flaw exists within the smtp...
PT-2022-6998 · Exim +4 · Exim +4
Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.97.1 Exim versions 4.94.2-7+deb11u1 through 4.96-15+deb12u2 Exim versions prior to 4.92-8+deb10u8 Exim versions prior to 4.96.1-1.1 Description: Exim is vulnerable to multiple issues, including a stack-based buffer...
PT-2022-6997 · Exim +4 · Exim +4
Name of the Vulnerable Software and Affected Versions: Exim affected versions not specified Description: The issue is related to the handling of NTLM challenge requests in Exim, which can result in a read past the end of an allocated data structure due to the lack of proper validation of...
Exim Remote Code Execution (CVE-2010-4345)
A remote code execution vulnerability exists in Exim. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
VulnCheck KEV: CVE-2019-16928
Exim contains an out-of-bounds write vulnerability which can allow for remote code execution...
The vulnerability of the smtp_setup_msg() function in the Exim message forwarding agent, related to reading beyond the buffer in memory, allows an attacker to access confidential information.
The vulnerability of the smtpsetupmsg function in the Exim message forwarding agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information by sending a specially crafted message to t...
The vulnerability of the pdkim_finish_bodyhash() function in the Exim message transport agent, related to reading beyond the buffer in memory, allows an attacker to access confidential information.
The vulnerability of the pdkimfinishbodyhash function in the Exim message transport agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...
The vulnerability of the extractoption() function in the Exim message forwarding agent, related to writing beyond the buffer size in memory, allows a hacker to execute arbitrary code.
The vulnerability of the extractoption function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted message to the mail server...
The vulnerability of the get_stdinput() function in the Exim message forwarding agent, related to integer overflow, allows an attacker to escalate privileges or execute arbitrary code.
The vulnerability of the getstdinput function in the Exim message forwarding agent is related to integer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...
Exim buffer overflow vulnerability (CNVD-2021-34532)
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A heap buffer overflow vulnerability exists in Exim in parsefixphrase, which stems from interpreting negative sizes in strncpy, and can be exploited by an attacker to elevate...
Exim Reuse After Release Vulnerability
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A post-release reuse vulnerability in smtpreset in Exim when providing TLS encryption over OpenSSL can be exploited by an attacker to achieve remote code execution...
Exim Out-of-Bounds Write Vulnerability
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A heap out-of-bounds write vulnerability exists in main in Exim. No detailed vulnerability details are provided at this time...
Exim Integer Overflow Vulnerability
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. An integer overflow vulnerability exists in getstdinput in Exim. No detailed vulnerability details are provided at this time...
Exim buffer overflow vulnerability (CNVD-2021-34531)
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A heap buffer overflow vulnerability exists in queuerun in Exim, which can be exploited by an attacker to elevate privileges from exim to root via the two sender options -R and -...
Exim Arbitrary File Deletion Vulnerability
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. Exim suffers from an arbitrary file deletion vulnerability that can be exploited by a local attacker to delete arbitrary files as root via the deletepidfile contention condition...
Exim out-of-bounds read vulnerability (CNVD-2021-34537)
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. An out-of-bounds read vulnerability exists in smtpsetupmsg in Exim, which can be exploited by an attacker to obtain sensitive information from process memory via an SMTP client...
Exim Out-of-Bounds Read Vulnerability
Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. Exim suffers from an out-of-bounds read vulnerability that stems from pdkimfinishbodyhash not validating the relationship between sig-bodyhash.len and b-bh.len, which can be...
Privilege Escalation
exim is vulnerable to privilege escalation. The vulnerability exists due to a race condition which a user may delete arbitrary files...
