Published: 11/05/2020 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Exim up to and including 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spa.c and auths/auth-spa.c.

Vulnerable Product	Search on Vulmon	Subscribe to Product
exim exim
fedoraproject fedora 31
fedoraproject fedora 32
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0
canonical ubuntu linux 18.04
canonical ubuntu linux 14.04
canonical ubuntu linux 19.10
canonical ubuntu linux 20.04
canonical ubuntu linux 16.04

Exim could be made to access sensitive information or bypass authentication if it received a specially crafted input ...

It was discovered that exim4, a mail transport agent, suffers from a authentication bypass vulnerability in the spa authentication driver The spa authentication driver is not enabled by default For the oldstable distribution (stretch), this problem has been fixed in version 489-2+deb9u7 For the stable distribution (buster), this problem has bee ...

Exim through 493 has an out-of-bounds read in the SPA authenticator that could result in SPA/NTLM authentication bypass in auths/spac and auths/auth-spac (CVE-2020-12783) ...

CWE-125 https://git.exim.org/exim.git/commit/57aa14b216432be381b6295c312065b2fd034f86 https://git.exim.org/exim.git/commit/a04174dc2a84ae1008c23b6a7109e7fa3fb7b8b0 https://bugs.exim.org/show_bug.cgi?id=2571 https://www.debian.org/security/2020/dsa-4687 https://lists.debian.org/debian-lts-announce/2020/05/msg00017.html https://usn.ubuntu.com/4366-1/http://www.openwall.com/lists/oss-security/2021/05/04/7 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F6IQQ2SERFUD4WMRSX6XYDNK7Q4GPT7Y/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7Z5UG6ZIG32V7M4PP3BCC65C27EWK7G/https://usn.ubuntu.com/4366-1/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-12783

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect