Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mrwv-vp3r-qhjm

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.

EPSS

Процентиль: 92%
0.07881
Низкий

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 5 лет назад

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.

CVSS3: 8.8
nvd
почти 5 лет назад

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. An authenticated remote SMTP client can insert newline characters into a spool file (which indirectly leads to remote code execution as root) via AUTH= in a MAIL FROM command.

CVSS3: 8.8
debian
почти 5 лет назад

Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters. A ...

fstec
больше 5 лет назад

Уязвимость агента пересылки сообщений Exim, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю обойти введенные ограничения безопасности

suse-cvrf
почти 5 лет назад

Security update for exim

EPSS

Процентиль: 92%
0.07881
Низкий