2626 matches found
CVE-2003-0743
Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...
[SECURITY] [DSA-376-2] New exim packages fix incorrect permissions on documentation
-------------------------------------------------------------------------- Debian Security Advisory DSA 376-2 [email protected] http://www.debian.org/security/ Matt Zimmerman September 7th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0743
CVE-2003-0743 affects Exim 3 (before 3.36) and Exim 4 (before 4.21); a heap-based buffer overflow in smtp_in.c triggered by long, space-filled HELO/EHLO arguments followed by a NULL and newline could let remote attackers execute code. Debian advisory DSA-376 notes the remediation: updates to exim...
CVE-2003-0743
Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...
CVE-2003-0743: Undefined Security Weakness
Heap-based buffer overflow in smtpin.c for Exim 3 exim3 before 3.36 and Exim 4 exim4 before 4.21 may allow remote attackers to execute arbitrary code via an invalid 1 HELO or 2 EHLO argument with a large number of spaces followed by a NULL character and a newline, which is not properly trimmed...
[SECURITY] [DSA-376-1] New exim, exim-tls packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 376-1 [email protected] http://www.debian.org/security/ Matt Zimmerman September 4th, 2003 http://www.debian.org/security/faq -...
DSA-376 exim - buffer overflow
Bulletin has no description...
exim buffer overflow
Buffer overflow with static string can be exploited as off-by-one...
exim remote heap overflow, probably not exploitable
Exim www.exim.org is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. There's a heap overflow in all versions of exim3 and exim4 prior to version 4.21. It can be exercised by anyone who can make an SMTP connection to the exim...
Exim < 4.22 smtp_in.c HELO/EHLO Remote Overflow
According to its banner, the version of Exim running on the remote host has a remote heap-based buffer overflow vulnerability. A remote, unauthenticated attacker could potentially exploit this to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...
CVE-2002-0274
Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C configuration file and other command line arguments...
CVE-2002-0274
CVE-2002-0274 : Affects Exim 3.34 and earlier. The vulnerability is a buffer overflow in the long -C (configuration file) and other command line arguments, enabling a local user to gain privileges. Root cause: improper handling of lengthy inputs in configuration/command line parsing leading to me...
CVE-2002-0274: Undefined Security Weakness
Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C configuration file and other command line arguments...
SpamAssassin / spamc+BSMTP remote buffer overflow
Well, I was going to wait until 2.50 release, but it seems to be taking and this likely affects only few installations. Besides, it's been in their public bugzilla for over a month. So: Attacker may be able to execute arbitrary code by sending a specially crafted e-mail to a system using...
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
DEBIAN-CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
CVE-2002-1381
Format string vulnerability in daemon.c for Exim 4.x through 4.10, and 3.x through 3.36, allows exim administrative users to execute arbitrary code by modifying the pidfilepath value...
Exim Internet Mailer 3.353.364.10 - Format String
Exim Internet Mailer 3.353.364.10 - Format String // source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attack...
Exim Internet Mailer 3.35/3.36/4.10 - Format String
// source: https://www.securityfocus.com/bid/6314/info A format string vulnerability has been discovered in Exim. The problem occurs in the daemongo function. By supplying malicious format strings via the command line, it is possible for an attacker to execute arbitrary code with root privileges...
Exim does not adequately validate user input thereby allow execution of arbitrary commands
Overview Under certain configurations, Exim may execute commands embedded in a mail message's From address. Description Exim is an open-source mail transport agent distributed by the University of Cambridge. Exim can be configured to route all incoming mail or mail to particular addresses through...