3 matches found
SUSE CVE-2020-28024
Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtpungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF...
DEBIAN-CVE-2020-28024
Exim 4 before 4.94.2 allows Buffer Underwrite that may result in unauthenticated remote attackers executing arbitrary commands, because smtpungetc was only intended to push back characters, but can actually push back non-character error codes such as EOF...
PT-2020-6048
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to the smtp ungetc function in the Exim mail transfer agent, which is vulnerable to buffer underwrite. This vulnerability may allow unauthenticated remote attackers to execute...