Arbitrary Code Execution

exim is vulnerable to arbitrary code execution. The vulnerability exists as a buffer overflow flaw was discovered in Exim's internal stringvformat function. A remote attacker could use this flaw to execute arbitrary code on the mail server running Exim...

Privilege Escalation

exim is vulnerable to privilege escalation. If an attacker were able to gain access to the "exim" user, they could cause Exim to execute arbitrary commands as the root user...

openSUSE: Security Advisory for exim (openSUSE-SU-2020:0491-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : exim (openSUSE-2020-491)

This update for exim fixes the following issues : - CVE-2020-8015: Fixed a local privilege escalation from user mail to root boo1154183. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-491. The text...

Exim < 4.93 Privilege Escalation vulnerability

According to its banner, the version of Exim running on the remote host is prior to 4.93. It is, therefore, potentially affected by a privilege escalation vulnerability. A flaw exists in the UNIX symbolic link that could allow an attacker to execute to escalate from the mail user to root. C Tenab...

Security update for exim (moderate)

openSUSE Security Update: Security update for exim Announcement ID: openSUSE-SU-2020:0491-1 Rating: moderate References: 1154183 1160726 Cross-References: CVE-2020-8015 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has one errata is now available. Description:...

CVE-2020-8015

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2020-8015

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2020-8015

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2020-8015

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

Spoofing

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2020-8015 Local privilege escalation in exim package from user mail to root

A UNIX Symbolic Link Symlink Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exim versions prior to 4.93.0.4-3.1...

CVE-2020-8015

CVE-2020-8015 is a local privilege-escalation in Exim packaging affecting openSUSE Factory exim versions prior to 4.93.0.4-3.1. The issue allows escalation from the mail user to root via a UNIX symbolic link (Symlink) following vulnerability. Remediation is to upgrade to Exim 4.93.0.4 or newer; S...

GLSA-202003-47 : Exim: Heap-based buffer overflow

The remote host is affected by the vulnerability described in GLSA-202003-47 Exim: Heap-based buffer overflow It was discovered that Exim incorrectly handled certain string operations. Impact : A remote attacker, able to connect to a vulnerable Exim instance, could possibly execute arbitrary code...

Exim: Heap-based buffer overflow

Background Exim is a message transfer agent MTA designed to be a a highly configurable, drop-in replacement for sendmail. Description It was discovered that Exim incorrectly handled certain string operations. Impact A remote attacker, able to connect to a vulnerable Exim instance, could possibly...

Exploit for Classic Buffer Overflow in Exim

Exim RCE CVE-2018-6789 Learning Environment Description...

VulnCheck KEV: CVE-2018-6789

Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution...

Debian: Security Advisory (DLA-2062-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2062-1 : sa-exim security update

It was found that sa-exim, the SpamAssassin filter for Exim, allows attackers to execute arbitrary code if users are allowed to run custom rules. A similar issue was fixed in spamassassin, CVE-2018-11805, which caused a functional regression in sa-exim. This update restores the compatibility...

[SECURITY] [DLA 2062-1] sa-exim security update

Package : sa-exim Version : 4.2.1-14+deb8u1 CVE ID : CVE-2019-19920 Debian Bug : 946829 It was found that sa-exim, the SpamAssassin filter for Exim, allows attackers to execute arbitrary code if users are allowed to run custom rules. A similar issue was fixed in spamassassin, CVE-2018-11805, whic...