Exim spool_read_header() Security Bypass

The vulnerability of the spoolreadheader function in the Exim mail agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...

PT-2020-6045

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to improper neutralization of line delimiters in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool...