CVE-2020-28014

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten...

Exim 安全漏洞

Exim is an open source messaging agent MTA running on Unix systems from Exim Open Source, which is responsible for routing, forwarding and delivering mail. A security vulnerability exists in Exim versions 4.96 through 4.98.1, which stems from reuse after release and could lead to elevation of...

Exim Security Vulnerabilities

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim 4.97 and earlier versions, which stems from a vulnerability that allows an attacker to bypass the SPF protection mechanism for SMTP smuggling...

SUSE CVE-2021-38371

The STARTTLS feature in Exim through 4.94.2 allows response injection buffering during MTA SMTP sending...

Exim 安全漏洞

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. A security vulnerability exists in Exim versions prior to 4.96, which stems from an invalid free in pamconverse in auths/callpam.c. The vulnerability is caused by the use of an invalid free...

Exploit for OS Command Injection in Exim

CVE-2019-10149 CVE-2019-10149 : A flaw was found in Exim versi...

Exim < 4.90.1 RCE Vulnerability - Version Check

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim";...

DEBIAN-CVE-2012-5671

Heap-based buffer overflow in the dkimeximquerydnstxt function in dkim.c in Exim 4.70 through 4.80, when DKIM support is enabled and aclsmtpconnect and aclsmtprcpt are not set to "warn control = dkimdisableverify," allows remote attackers to execute arbitrary code via an email from a malicious DN...

Exim < 3.36 / 4.33 Multiple Remote Overflows

The remote version of Exim has multiple remote stack-based buffer overflow vulnerabilities when header syntax checking is enabled. It should be noted that this is not the default configuration. A remote attacker could exploit this to execute arbitrary code. C Tenable Network Security, Inc...

exim remote heap overflow, probably not exploitable

Exim www.exim.org is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. There's a heap overflow in all versions of exim3 and exim4 prior to version 4.21. It can be exercised by anyone who can make an SMTP connection to the exim...