The vulnerability of the spool_read_header() function in the Exim message transport agent allows attackers to bypass security restrictions due to insufficient input validation.

The vulnerability of the spoolreadheader function in the Exim mail agent is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions remotely...

PT-2020-6045

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to improper neutralization of line delimiters in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can place a newline into a spool...