VulnCheck KEV: CVE-2018-6789

Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution...

Exploit for OS Command Injection in Exim

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor...

This Week in Security News: How a Partnership can Advance DevSecOps and Cybersecurity Issues in the Midwest and South U.S.

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how Trend Micro’s partnership with Snyk will advance DevSecOps. Also, read about cyber attacks affecting hospitals in Alabama an...

New Critical Exim Flaw Exposes Email Servers to Remote Attacks — Patch Released

A critical security vulnerability has been discovered and fixed in the popular open-source Exim email server software, which could allow a remote attacker to simply crash or potentially execute malicious code on targeted servers. Exim maintainers today released an urgent security update—Exim...

Ubuntu 19.04 : Exim vulnerability (USN-4141-1)

It was discovered that Exim incorrectly handled certain string operations. A remote attacker could use this issue to cause Exim to crash, resulting in a denial of service, or possibly execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly...

Exim mail server vulnerability related to an operation exceeding buffer boundaries in memory, allowing an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service

A vulnerability in the Exim mail server is related to errors in processing objects in memory. Exploitation of the vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause denial of service...

USN-4124-2 exim4 vulnerability

USN-4124-1 fixed a vulnerability in Exim. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Exim incorrectly handled certain decoding operations. A remote attacker could possibly use this issue to execute arbitrary commands...

Exim TLS Flaw Opens Email Servers to Remote 'Root' Code Execution Attacks

A critical remote code execution vulnerability has been discovered in the popular open-source Exim email server software, leaving at least over half a million email servers vulnerable to remote hackers. Exim maintainers today released Exim version 4.92.2 after publishing an early warning two days...

DEBIAN-CVE-2019-15846

Exim before 4.92.2 allows remote attackers to execute arbitrary code as root via a trailing backslash...

Exim deliver_message() Function Remote Command Execution Vulnerability (Remote)

Binary data eximdelivermessagecmdexec.nbin...

Ubuntu 16.04 LTS / 18.04 LTS : Exim vulnerability (USN-4075-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4075-1 advisory. Jeremy Harris discovered that Exim incorrectly handled sort expansions. In environments where sort expansions are used, a remote attacker could possib...

Exim Code Issue Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A code issue vulnerability exists in Exim versions 4.85 through 4.92, which can be exploited by an attacker to run code...

Exploit for OS Command Injection in Exim

eximrce Simple python socket connection to test if exim is vu...

UBUNTU-CVE-2019-10149

A flaw was found in Exim versions 4.87 to 4.91 inclusive. Improper validation of recipient address in delivermessage function in /src/deliver.c may lead to remote command execution...

PT-2019-2859

Name of the Vulnerable Software and Affected Versions Exim versions 4.87 through 4.91 Description The issue is related to improper validation of recipient addresses in the deliver message function, located in /src/deliver.c, which may lead to remote command execution. This flaw can be exploited b...

Exim < 4.90.1 Remote Code Execution

Binary data 700223.prm...

Ubuntu 14.04 LTS / 16.04 LTS : Exim vulnerability (USN-3565-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3565-1 advisory. Meh Chang discovered that Exim incorrectly handled memory in certain decoding operations. A remote attacker could use this issue to cause Exim to cras...

CVE-2018-6789

An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to execute code remotely...

PT-2018-1057 · Exim +3 · Exim +3

Name of the Vulnerable Software and Affected Versions: Exim versions prior to 4.90.1 Description: An issue in the base64d function in the SMTP listener of Exim can cause a buffer overflow when processing handcrafted messages. This can be exploited to execute code remotely. The vulnerability is...

Internet Bug Bounty: Exim use-after-free vulnerability while reading mail header involving BDAT commands

Original article is here Use-after-free in receivemsg leads to RCE Vulnerability Analysis To explain this bug, we need to start with the memory management of exim. There is a series of functions starts with store such as storeget, storerelease, storereset. These functions are used to manage...