Поиск уязвимостей
Количество 7
Количество 7
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root.
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root.
CVE-2020-28026
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, r ...
GHSA-gf8c-vh34-8jv5
Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root.
BDU:2021-02763
Уязвимость функции spool_read_header() агента пересылки сообщений Exim, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю обойти ограничения безопасности
openSUSE-SU-2021:0677-1
Security update for exim
ALT-PU-2021-1764
ALT-PU-2021-1764: package `exim` update to version 4.94.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-28026 Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root. | CVSS3: 9.8 | 9% Низкий | больше 5 лет назад |
 | CVE-2020-28026 Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root. | CVSS3: 9.8 | 9% Низкий | больше 5 лет назад |
| CVE-2020-28026 Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, r ... | CVSS3: 9.8 | 9% Низкий | больше 5 лет назад |
| GHSA-gf8c-vh34-8jv5 Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT= can place a newline into a spool header file, and indirectly allow unauthenticated remote attackers to execute arbitrary commands as root. | CVSS3: 9.8 | 9% Низкий | больше 4 лет назад |
 | BDU:2021-02763 Уязвимость функции spool_read_header() агента пересылки сообщений Exim, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю обойти ограничения безопасности | CVSS2: 9.3 | 9% Низкий | около 6 лет назад |
 | openSUSE-SU-2021:0677-1 Security update for exim | больше 5 лет назад | ||
| ALT-PU-2021-1764 ALT-PU-2021-1764: package `exim` update to version 4.94.2-alt1 | CVSS3: 9.8 | больше 5 лет назад |
Уязвимостей на страницу