Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

university of cambridge exim 3.22 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2
CVE-2010-4344
Heap-based buffer overflow in the string_vformat function in string.c in Exim prior to 4.70 allows remote malicious users to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to impro...
Exim Exim 2.11Exim Exim 4.66Exim Exim 4.10Exim Exim 3.16Exim Exim 3.21Exim Exim 3.01Exim Exim 3.31Exim Exim 4.24Exim Exim 3.33Exim Exim 3.30Exim Exim 4.30Exim Exim 4.21Exim Exim 4.03Exim Exim 4.51Exim Exim 4.67Exim Exim 4.63Exim Exim 4.00Exim Exim 4.43Exim Exim 4.22Exim Exim 3.10Exim Exim 4.40Exim Exim 4.52
6.9
CVSSv2
CVE-2010-4345
Exim 4.72 and previous versions allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands, as demonstrated by the spool_directory directive.
Exim Exim 2.11Exim Exim 4.70Exim Exim 4.69Exim Exim 4.66Exim Exim 4.10Exim Exim 3.16Exim Exim 3.21Exim Exim 3.01Exim Exim 3.31Exim Exim 4.24Exim Exim 3.33Exim Exim 3.30Exim EximExim Exim 4.30Exim Exim 4.21Exim Exim 4.03Exim Exim 4.51Exim Exim 4.71Exim Exim 4.67Exim Exim 4.63Exim Exim 4.00Exim Exim 4.43
7.5
CVSSv2
CVE-2003-0743
Heap-based buffer overflow in smtp_in.c for Exim 3 (exim3) prior to 3.36 and Exim 4 (exim4) prior to 4.21 may allow remote malicious users to execute arbitrary code via an invalid (1) HELO or (2) EHLO argument with a large number of spaces followed by a NULL character and a newli...
University Of Cambridge Exim 3.15University Of Cambridge Exim 3.16University Of Cambridge Exim 3.3.1University Of Cambridge Exim 3.3.2University Of Cambridge Exim 3.36University Of Cambridge Exim 4.10University Of Cambridge Exim 3.11University Of Cambridge Exim 3.12University Of Cambridge Exim 3.19University Of Cambridge Exim 3.20University Of Cambridge Exim 3.32University Of Cambridge Exim 3.33University Of Cambridge Exim 3.0University Of Cambridge Exim 3.17University Of Cambridge Exim 3.18University Of Cambridge Exim 3.30University Of Cambridge Exim 3.31University Of Cambridge Exim 4.20University Of Cambridge Exim 3.13University Of Cambridge Exim 3.14University Of Cambridge Exim 3.21University Of Cambridge Exim 3.22
7.5
CVSSv2
CVE-2001-0889
Exim 3.22 and previous versions, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote malicious users to execute arbitrary commands via shell metacharacters.
University Of Cambridge EximRedhat Linux
7.5
CVSSv2
CVE-2001-0690
Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote malicious user to execute arbitrary code via format strings in SMTP mail headers.
Conectiva LinuxUniversity Of Cambridge EximRedhat LinuxDebian Debian Linux 4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2024-34413CVE-2024-34089CVE-2024-33408localSQLCVE-2024-0402CVE-2024-33910CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook