Design/Logic Flaw

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...

Code injection

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...

Code injection

cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...

CVE-2017-18477

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account SEC-206...

CVE-2017-18477

CVE-2017-18477 : Affects cPanel before 62.0.4 where Exim transports could execute in the context of the nobody account (SEC-206). Root cause described as a context execution issue within Exim transports. Impact: potential privilege context exposure/run as nobody; document does not quantify additi...

CVE-2017-18475

In cPanel before 62.0.4, Exim piped filters ran in the context of an incorrect user account when delivering to a system user SEC-204...

CVE-2017-18475

CVE-2017-18475 affects cPanel before 62.0.4. Exim piped filters run in the context of an incorrect user account when delivering to a system user (SEC-204). CVSS v3.0 base score 8.8 (HIGH) indicates potentially high impact on confidentiality, integrity and availability. Upgrade to cPanel 62.0.4 or...

CVE-2017-18474

cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...

CVE-2017-18474

CVE-2017-18474 affects cPanel before 62.0.4. The issue allows arbitrary file-read operations via Exim valiases, due to an improper handling path/resource filtering. Public descriptions consistently show impact as reading restricted files. Connected documents confirm the product/version and the un...

[ASA-201908-4] exim: arbitrary code execution

Arch Linux Security Advisory ASA-201908-4 ========================================= Severity: Critical Date : 2019-08-05 CVE-ID : CVE-2019-13917 Package : exim Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1011 Summary ======= The package exim before versi...

CVE-2017-18396

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

CVE-2017-18396

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

Design/Logic Flaw

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

CVE-2017-18396

cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases SEC-329...

CVE-2017-18396

The CVE-2017-18396 issue affects cPanel before 68.0.15, where Exim vdomainaliases enables arbitrary file-read operations. Root cause: improper handling in vdomainaliases leads to access to restricted files. Impact: potential disclosure of sensitive data on affected systems. Evidence from Red Hat ...

CVE-2018-20936

cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

Design/Logic Flaw

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14404

CVE-2019-14404 affects cPanel prior to 78.0.18, permitting certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). Impact is information disclosure; no exploit details provided beyond this. Remediation: upgrade to cPanel 78.0.18 or later (p...