Lucene search
+L

8 matches found

BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•19 views

The vulnerability of the parse_fix_phrase() function in the Exim message forwarding agent, related to writing beyond buffer boundaries in memory, allows a hacker to elevate their privileges in the system and execute arbitrary code.

The vulnerability of the parsefixfrase function in the Exim message forwarding agent is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an intruder with privileges in the system to execute arbitrary code...

7.8CVSS8.4AI score0.00395EPSS
SaveExploits1References9Affected Software4
OSV
OSV
•added 2021/05/06 1:15 p.m.•12 views

DEBIAN-CVE-2020-28016

Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/05/06 3:51 a.m.•64 views

CVE-2020-28016

Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...

8.7AI score0.00395EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2021/05/06 3:51 a.m.•105 views

CVE-2020-28016

Exim 4 before 4.94.2 allows an off-by-two Out-of-bounds Write because "-F ''" is mishandled by parsefixphrase...

7.8CVSS7.5AI score0.00395EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/05/04 12:00 a.m.•3 views

PT-2021-3129

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to a buffer overflow in the parse fix phrase function of the Exim message transfer agent, which can be exploited to gain privileges in the system and execute arbitrary code. The...

9.8CVSS0.61664EPSS
SaveExploits5References95
CNNVD
CNNVD
•added 2021/05/04 12:00 a.m.•9 views

Exim 缓冲区错误漏洞

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. A heap buffer overflow vulnerability exists in Exim in parsefixphrase, which stems from interpreting negative sizes in strncpy, and can be exploited by an attacker to elevate...

7.8CVSS7.7AI score0.00393EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2021/05/04 12:00 a.m.•18 views

Exim 缓冲区错误漏洞

Exim was developed at Cambridge University as a Message Transfer Agent MTA for Unix systems connected to the Internet. Exim suffers from a buffer overflow vulnerability. The vulnerability stems from a "-F" handling error in parsefixphrase. No details of the vulnerability are available at this tim...

7.8CVSS7.7AI score0.00395EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2020/10/20 12:00 a.m.•3 views

PT-2020-6038

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is caused by a heap-based buffer overflow due to the mishandling of negative sizes in strncpy, potentially allowing privilege escalation from any user to root. This occurs because of the...

9.8CVSS0.61664EPSS
SaveExploits5References105
Rows per page
Query Builder