Arbitrary File Creation And Clobbering

exim4:buster is vulnerable to an arbitrary file creation and clobbering...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. If a local attacker executes Exim with affected functions such as -F '.', a buffer overflow would occur in parsefixphrase when it calls strncpy with a -1 size, potentially allowing for arbitrary code execution on the host OS...

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists when allowfilter is true, using a missing close-on-exec flag for a privileged pipe...

Heap Buffer Overflow

exim4:buster is vulnerable to heap buffer overflow in queuerun...

Arbitrary Code Execution

exim4 is vulnerable to arbitrary code execution. An integer overflow in receiveaddrecipient could potentially allow an attacker to execute arbitrary code on the host OS...

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists due to a new-line injection into spool header files...

Denial Of Service (DoS)

exim4:buster is vulnerable to denial of service. The vulnerability exists because of failure to reset function pointer after BDAT error...

Privilege Escalation

exim4 is vulnerable to privilege escalation. An attacker with the privileges of the exim user can create a symlink/hardlink in the log directory and append arbitrary contents to an arbitrary file such as /etc/passwd to obtain full root privileges...

Privilege Escalation

exim4 is vulnerable to privilege escalation. The vulnerability exists due to an integer overflow in getstdinput...

Denial Of Service (DoS)

exim4:buster is vulnerable to denial of service and other assorted attacks in Exim's spool directory...

USN-4934-1 exim4 vulnerabilities

It was discovered that Exim contained multiple security issues. An attacker could use these issues to cause a denial of service, execute arbitrary code remotely, obtain sensitive information, or escalate local privileges...

[SECURITY] [DSA 4912-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 04, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4912-1] exim4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4912-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 04, 2021 https://www.debian.org/security/faq -...

DSA-4912-1 exim4 - security update

Bulletin has no description...

Ubuntu: Security Advisory (USN-4366-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4366-1 exim4 vulnerability

It was discovered that Exim incorrectly handled certain inputs. An remote attacker could possibly use this issue to access sensitive information or authentication bypass...

Debian DLA-2213-1 : exim4 security update

It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authentication driver is not enabled by default. For Debian 8 'Jessie', this problem has been fixed in version 4.84.2-2+deb8u7. We recommend that you...

Debian: Security Advisory (DLA-2213-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2213-1] exim4 security update

Package : exim4 Version : 4.84.2-2+deb8u7 CVE ID : CVE-2020-12783 It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authentication driver is not enabled by default. For Debian 8 "Jessie", this problem...

Debian DSA-4687-1 : exim4 - security update

It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver. The spa authentication driver is not enabled by default. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...