Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

exim exim 4.20 vulnerabilities and exploits

(subscribe to this query)
392
VMScore
CVE-2010-2023
transports/appendfile.c in Exim prior to 4.72, when a world-writable sticky-bit mail directory is used, does not verify the st_nlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user&#...
Exim Exim 4.10Exim Exim 4.20Exim Exim 4.68Exim Exim 4.67Exim Exim 4.60Exim Exim 4.54Exim Exim 4.34Exim Exim 4.41Exim Exim 4.42Exim EximExim Exim 4.64Exim Exim 4.63Exim Exim 4.51Exim Exim 4.70Exim Exim 4.69Exim Exim 4.62Exim Exim 4.61Exim Exim 4.44Exim Exim 4.43Exim Exim 4.21Exim Exim 4.33Exim Exim 4.50
392
VMScore
CVE-2010-2024
transports/appendfile.c in Exim prior to 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/.
Exim EximExim Exim 4.70Exim Exim 4.63Exim Exim 4.62Exim Exim 4.44Exim Exim 4.43Exim Exim 4.22Exim Exim 4.21Exim Exim 4.10Exim Exim 4.20Exim Exim 4.69Exim Exim 4.68Exim Exim 4.61Exim Exim 4.60Exim Exim 4.54Exim Exim 4.34Exim Exim 4.33Exim Exim 4.41Exim Exim 4.42Exim Exim 4.65Exim Exim 4.64Exim Exim 4.51
409
VMScore
CVE-2014-2972
expand.c in Exim prior to 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.
Exim Exim 4.77Exim Exim 4.76Exim Exim 4.69Exim Exim 4.68Exim Exim 4.61Exim Exim 4.60Exim Exim 4.42Exim Exim 4.41Exim Exim 4.24Exim Exim 4.23Exim Exim 4.10Exim Exim 4.05Exim Exim 4.75Exim Exim 4.74Exim Exim 4.67Exim Exim 4.66Exim Exim 4.54Exim Exim 4.53Exim Exim 4.40Exim Exim 4.34Exim Exim 4.22Exim Exim 4.21
605
VMScore
CVE-2014-2957
The dmarc_process function in dmarc.c in Exim prior to 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote malicious users to execute arbitrary code via the From header in an email, which is passed to the expand_string function.
Exim Exim 4.77Exim Exim 4.76Exim Exim 4.75Exim Exim 4.74Exim Exim 4.60Exim Exim 4.54Exim Exim 4.53Exim Exim 4.52Exim Exim 4.24Exim Exim 4.23Exim Exim 4.22Exim Exim 4.21Exim Exim 4.20Exim Exim 4.80.1Exim Exim 4.72Exim Exim 4.70Exim Exim 4.65Exim Exim 4.63Exim Exim 4.61Exim Exim 4.51Exim Exim 4.44Exim Exim 4.32
971
VMScore
CVE-2010-4344
Heap-based buffer overflow in the string_vformat function in string.c in Exim prior to 4.70 allows remote malicious users to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to impro...
Exim Exim 2.11Exim Exim 4.66Exim Exim 4.10Exim Exim 3.16Exim Exim 3.21Exim Exim 3.01Exim Exim 3.31Exim Exim 4.24Exim Exim 3.33Exim Exim 3.30Exim Exim 4.30Exim Exim 4.21Exim Exim 4.03Exim Exim 4.51Exim Exim 4.67Exim Exim 4.63Exim Exim 4.00Exim Exim 4.43Exim Exim 4.22Exim Exim 3.10Exim Exim 4.40Exim Exim 4.52
780
VMScore
CVE-2011-1764
Format string vulnerability in the dkim_exim_verify_finish function in src/dkim.c in Exim prior to 4.76 might allow remote malicious users to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in data used in DKIM logging, as demonstra...
Exim Exim 4.50Exim Exim 4.44Exim Exim 4.63Exim Exim 4.62Exim Exim 4.61Exim Exim 4.21Exim Exim 4.22Exim Exim 4.41Exim Exim 4.40Exim Exim 4.03Exim Exim 4.02Exim Exim 3.32Exim Exim 3.31Exim Exim 3.14Exim Exim 3.13Exim Exim 2.12Exim Exim 2.11Exim Exim 4.74Exim EximExim Exim 4.51Exim Exim 4.30Exim Exim 4.64
614
VMScore
CVE-2011-0017
The open_log function in log.c in Exim 4.72 and previous versions does not check the return value from (1) setuid or (2) setgid system calls, which allows local users to append log data to arbitrary files via a symlink attack.
Exim Exim 4.43Exim Exim 4.34Exim Exim 4.61Exim Exim 4.60Exim Exim 4.42Exim Exim 4.65Exim Exim 4.32Exim Exim 4.20Exim Exim 4.02Exim Exim 4.01Exim Exim 3.30Exim Exim 3.22Exim Exim 3.12Exim Exim 3.11Exim Exim 2.11Exim Exim 2.10Exim Exim 4.69Exim Exim 4.50Exim Exim 4.44Exim Exim 4.63Exim Exim 4.62Exim Exim 4.21
805
VMScore
CVE-2010-4345
Exim 4.72 and previous versions allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Exim Exim 2.11Exim Exim 4.70Exim Exim 4.69Exim Exim 4.66Exim Exim 4.10Exim Exim 3.16Exim Exim 3.21Exim Exim 3.01Exim Exim 3.31Exim Exim 4.24Exim Exim 3.33Exim Exim 3.30Exim EximExim Exim 4.30Exim Exim 4.21Exim Exim 4.03Exim Exim 4.51Exim Exim 4.71Exim Exim 4.67Exim Exim 4.63Exim Exim 4.00Exim Exim 4.43
668
VMScore
CVE-2003-0743
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) prior to 3.36 and Exim 4 (exim4) prior to 4.21 may allow remote malicious users to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newli...
University Of Cambridge Exim 3.15University Of Cambridge Exim 3.16University Of Cambridge Exim 3.3.1University Of Cambridge Exim 3.3.2University Of Cambridge Exim 3.36University Of Cambridge Exim 4.10University Of Cambridge Exim 3.11University Of Cambridge Exim 3.12University Of Cambridge Exim 3.19University Of Cambridge Exim 3.20University Of Cambridge Exim 3.32University Of Cambridge Exim 3.33University Of Cambridge Exim 3.0University Of Cambridge Exim 3.17University Of Cambridge Exim 3.18University Of Cambridge Exim 3.30University Of Cambridge Exim 3.31University Of Cambridge Exim 4.20University Of Cambridge Exim 3.13University Of Cambridge Exim 3.14University Of Cambridge Exim 3.21University Of Cambridge Exim 3.22
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook