Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-0021
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-0021

2005-05-0200:00:00
ubuntu.com
ubuntu.com
10

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.6%

Multiple buffer overflows in Exim before 4.43 may allow attackers to
execute arbitrary code via (1) an IPv6 address with more than 8 components,
as demonstrated using the -be command line option, which triggers an
overflow in the host_aton function, or (2) the -bh command line option or
dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse
function.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchexim< 3.36-18ubuntu1UNKNOWN
ubuntu6.10noarchexim< 3.36-18ubuntu1UNKNOWN
ubuntu7.04noarchexim< 3.36-18ubuntu1UNKNOWN
ubuntu6.06noarchexim4< 4.60-3ubuntu3.1UNKNOWN
ubuntu6.10noarchexim4< 4.62-2UNKNOWN
ubuntu7.04noarchexim4< 4.62-2UNKNOWN

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

55.6%