Описание
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| exim4 | fixed | 4.99.4-2 | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/07/22/9
https://www.exim.org/static/doc/security/EXIM-Security-2026-06-22.3/EXIM-Security-2026-06-22.3.txt
Fixed by: https://code.exim.org/exim/exim/commit/950c1361764fe30e90b39e3594f4b93149c686b2 (exim-4.99.5)
Связанные уязвимости
CVSS3: 7.4
ubuntu
11 дней назад
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
CVSS3: 7.4
nvd
11 дней назад
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.
CVSS3: 7.4
github
11 дней назад
Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.