CVE-2018-20936

cPanel before 68.0.27 allows attackers to read the SRS secret via exim.conf SEC-308...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

Design/Logic Flaw

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14404

CVE-2019-14404 affects cPanel prior to 78.0.18, permitting certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484). Impact is information disclosure; no exploit details provided beyond this. Remediation: upgrade to cPanel 78.0.18 or later (p...

CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtualuserspam router SEC-484...

CVE-2019-14388

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

CVE-2019-14388

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

Design/Logic Flaw

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

CVE-2019-14388

CVE-2019-14388 affects cPanel prior to 82.0.2, allowing unauthenticated file creation due to mishandled Exim log parsing (SEC-507). Root cause: improper handling of Exim logs enables file creation without authentication. Impact: unauthorized file creation; no explicit exploitation details provide...

CVE-2019-14388

cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...

Exim 4.85 - 4.92 RCE Vulnerability

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...

Exim deliver_message() Function Remote Command Execution Vulnerability (Remote)

Binary data eximdelivermessagecmdexec.nbin...

Exim 4.92 < 4.92.3 RCE Vulnerability

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim"; if...

CVE-2019-13917

Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain. Mitigation Do not use $sort in your exim configuration...

FreeBSD : Exim -- RCE in ${sort} expansion (3e0da406-aece-11e9-8d41-97657151f8c2)

Exim team report : A local or remote attacker can execute programs with root privileges - if you've an unusual configuration. If your configuration uses the $sort expansion for items that can be controlled by an attacker e.g. $localpart, $domain. The default config, as shipped by the Exim...

Ubuntu 16.04 LTS / 18.04 LTS : Exim vulnerability (USN-4075-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4075-1 advisory. Jeremy Harris discovered that Exim incorrectly handled sort expansions. In environments where sort expansions are used, a remote attacker could possib...

Amazon Linux AMI : exim (ALAS-2019-1252)

Exim allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain. CVE-2019-13917 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...

DEBIAN-CVE-2019-13917

Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...

CVE-2019-13917

Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...