CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

Design/Logic Flaw

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26098

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

EUVD-2020-18728

cPanel before 88.0.3 mishandles the Exim filter path, leading to remote code execution SEC-485...

CVE-2020-26098

CVE-2020-26098 affects cPanel prior to 88.0.3, where improper handling of the Exim filter path enables remote code execution (SEC-485). The issue is confirmed across multiple connected sources (RH CVE, CNVD, NVD, CVE listing, EUVD, PRION) and is characterized by a high/critical impact vector with...

Arbitrary Code Execution

sa-exim is vulnerable to arbitrary code execution. The vulnerability exists through the reliance of eval by Greylisting.pm, rather than direct parsing and/or use of the taint feature...

Ubuntu: Security Advisory (USN-4520-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4520-1 sa-exim vulnerability

It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code. CVE-2019-19920...

USN-4520-1: Exim SpamAssassin vulnerability

It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code. CVE-2019-19920...

Ubuntu 16.04 LTS : Exim SpamAssassin vulnerability (USN-4520-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4520-1 advisory. It was discovered that Exim SpamAssassin does not properly handle configuration strings. An attacker could possibly use this issue to execute arbitrary code...

The vulnerability of the auths/spa.c and auths/auth-spa.c components of the Exim mail server allows a hacker to gain access to confidential data.

The vulnerability of the auths/spa.c and auths/auth-spa.c components of the Exim mail server is related to reading data from buffers beyond their allowed limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

Amazon Linux AMI : exim (ALAS-2020-1380)

The version of exim installed on the remote host is prior to 4.92-1.26. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1380 advisory. Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa...

Important: exim

Issue Overview: Exim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c. CVE-2020-12783 Affected Packages: exim Issue Correction: Run yum update exim or yum update --advisory ALAS-2020-1380 to...

Exploit for OS Command Injection in Exim

Exim CVE Data Collection Data Collection Related to Exim Vuln...

Exploit for OS Command Injection in Exim

Exim CVE Data Collection Data Collection Related to Exim Vuln...

NSA Announces Sandworm Actors Exploiting Exim MTA Vulnerability (CVE-2019-10149)

The Exim MTA vulnerability, initially reported by Qualys in May 2019, is currently being exploited in the wild. Recently, the US National Security Agency NSA announced that Sandworm actors Russian hacker group have been actively exploiting the Exim Mail Transfer Agent vulnerability. Qualys releas...

NSA Warns of Sandworm Backdoor Attacks on Mail Servers

The Russia-linked APT group Sandworm has been spotted exploiting a vulnerability in the internet’s top email server software, according to the National Security Agency NSA. The bug exists in the Exim Mail Transfer Agent MTA software, an open-source offering used on Linux and Unix-like systems. It...

Fedora: Security Advisory for exim (FEDORA-2020-2e084c987d)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for exim (FEDORA-2020-93d7305d71)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...