Lucene search
+L

2247 matches found

Packet Storm
Packet Storm
added 2021/06/03 12:0 a.m.414 views

Exim base64d Buffer Overflow

!/usr/bin/python import sys import time import socket import struct s = None f = None def logo: print print " CVE-2018-6789 Poc Exploit" print "@straightblast ; [email protected]" print def connecthost, port: global s global f s = socket.createconnectionhost,port f = s.makefile'rw', bufsize=0...

7.5CVSS0.7AI score0.81715EPSS
SaveExploits19
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.7 views

The vulnerability of the receive_add_recipient() function in the Exim message forwarding agent, related to integer overflows, allows a hacker to execute arbitrary code.

The vulnerability of the receiveaddrecipient function in the Exim message forwarding agent is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

9.8CVSS7.8AI score0.36899EPSS
SaveExploits1References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

7.8CVSS7.3AI score0.00404EPSS
SaveExploits3References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.13 views

The vulnerability of the smtp_setup_msg() function in the Exim message forwarding agent, related to reading beyond the buffer in memory, allows an attacker to access confidential information.

The vulnerability of the smtpsetupmsg function in the Exim message forwarding agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information by sending a specially crafted message to t...

7.5CVSS7.5AI score0.02606EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.8 views

The vulnerability of the queue_run() function in the Exim message transfer agent allows for privilege escalation within the system by exploiting buffer overflows in the “queue”. This enables attackers to execute arbitrary code.

The vulnerability of the queuerun function in the Exim message transport agent is related to buffer overflow in the “queue”. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

7.8CVSS8AI score0.00393EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.10 views

The vulnerability of the Exim message transfer agent, related to insufficient validation of input data, allows attackers to circumvent security restrictions set by users.

The vulnerability of the Exim message transfer agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions set by the user...

9CVSS7.3AI score0.04139EPSS
SaveExploits1References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of the Exim message transfer agent, related to resource management errors, allows a attacker to perform denial-of-service attacks.

The vulnerability of the Exim message transfer agent is related to resource management errors. Exploiting this vulnerability allows a malicious actor to perform a Denial-of-Service attack by sending specially crafted data to the application...

7.5CVSS7.3AI score0.61664EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.6 views

The vulnerability of the extractoption() function in the Exim message forwarding agent, related to writing beyond the buffer size in memory, allows a hacker to execute arbitrary code.

The vulnerability of the extractoption function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted message to the mail server...

9.8CVSS8AI score0.03017EPSS
SaveExploits1References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.8 views

The vulnerability of the smtp_ungetc() function in the Exim message transport agent, related to integer overflows, allows attackers to execute arbitrary code.

The vulnerability of the smtpungetc function in the Exim message delivery agent is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by sending a specially crafted request to the server...

9.8CVSS7.9AI score0.04153EPSS
SaveExploits1References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.8 views

The vulnerability of the parse_fix_frase() function in the Exim message forwarding agent, related to buffer overflows in the “queue”, allows an attacker to elevate their privileges within the system and execute arbitrary code.

The vulnerability of the parsefixphrase function in the Exim message forwarding agent is caused by an overflow in the buffer in the “queue”. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

7.8CVSS7.9AI score0.00393EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of the spool_read_header() function in the Exim message transport agent allows attackers to bypass security restrictions due to insufficient input validation.

The vulnerability of the spoolreadheader function in the Exim mail agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...

9.3CVSS7.3AI score0.09251EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.9 views

The vulnerability of the tls-openssl.c component of the Exim message relay agent allows an attacker to elevate their privileges within the system and execute arbitrary code. This vulnerability stems from the way memory is managed after it is freed.

The vulnerability of the tls-openssl.c component of the Exim message transfer agent allows for privilege escalation within the system by exploiting memory reclamation after it is released. This enables attackers to execute arbitrary code by sending a specially crafted request...

10CVSS7.8AI score0.5675EPSS
SaveExploits3References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.12 views

The vulnerability of the pdkim_finish_bodyhash() function in the Exim message transport agent, related to reading beyond the buffer in memory, allows an attacker to access confidential information.

The vulnerability of the pdkimfinishbodyhash function in the Exim message transport agent is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

7.5CVSS7.5AI score0.02764EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.14 views

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate privileges within the system by sending the file’s PID...

6.1CVSS7.3AI score0.0094EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.5 views

The vulnerability of the get_stdinput() function in the Exim message forwarding agent, related to integer overflow, allows an attacker to escalate privileges or execute arbitrary code.

The vulnerability of the getstdinput function in the Exim message forwarding agent is related to integer overflow. Exploiting this vulnerability can allow an attacker to increase their privileges or execute arbitrary code...

7.2CVSS7.8AI score0.00464EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of the main() function in the Exim message forwarding agent lies in the fact that it allows writing beyond the buffer boundaries in memory. This enables a hacker to increase their privileges within the system and execute arbitrary code.

The vulnerability of the main function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system and execute arbitrary code...

7.8CVSS7.8AI score0.00414EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to delete any files in the system at will.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the system...

3.3CVSS7.4AI score0.00976EPSS
SaveExploits4References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.11 views

The vulnerability of the parse_fix_phrase() function in the Exim message forwarding agent, related to writing beyond buffer boundaries in memory, allows a hacker to elevate their privileges in the system and execute arbitrary code.

The vulnerability of the parsefixfrase function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder with privileges in the system to execute arbitrary code...

7.8CVSS7.9AI score0.00395EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.6 views

The vulnerability of the Exim message transfer agent, related to insufficient input data validation, allows attackers to circumvent security restrictions.

The vulnerability of the Exim message transfer agent is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass security restrictions and execute arbitrary commands...

7.8CVSS7.7AI score0.00376EPSS
SaveExploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/02 12:0 a.m.10 views

The vulnerability of the receive_msg() function in the Exim message forwarding agent, related to integer overflows, allows attackers to execute arbitrary code.

The vulnerability of the receivemsg function in the Exim message forwarding agent is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9.8CVSS7.7AI score0.07944EPSS
SaveExploits1References13Affected Software4
Rows per page
Query Builder