Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 11

Количество 11

github логотип

GHSA-67rj-8f2h-26fc

больше 2 лет назад

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-17434.

CVSS3: 9.8
EPSS: Средний
ubuntu логотип

CVE-2023-42115

больше 2 лет назад

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

CVSS3: 9.8
EPSS: Средний
redhat логотип

CVE-2023-42115

около 3 лет назад

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

CVSS3: 9.8
EPSS: Средний
nvd логотип

CVE-2023-42115

больше 2 лет назад

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

CVSS3: 9.8
EPSS: Средний
debian логотип

CVE-2023-42115

больше 2 лет назад

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi ...

CVSS3: 9.8
EPSS: Средний
fstec логотип

BDU:2023-06268

около 3 лет назад

Уязвимость cлужбы smtp почтового сервера Exim, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
EPSS: Средний
suse-cvrf логотип

openSUSE-SU-2023:0293-1

около 3 лет назад

Security update for exim

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2024:0007-1

почти 3 года назад

Security update for exim

EPSS: Низкий
redos логотип

ROS-20240404-17

больше 2 лет назад

Множественные уязвимости exim

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2023-7644

почти 3 года назад

ALT-PU-2023-7644: package `exim` update to version 4.97-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2026-11576

4 месяца назад

ALT-PU-2026-11576: package `exim` update to version 4.99.3-alt1

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-67rj-8f2h-26fc

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-17434.

CVSS3: 9.8
12%
Средний
больше 2 лет назад
ubuntu логотип
CVE-2023-42115

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

CVSS3: 9.8
12%
Средний
больше 2 лет назад
redhat логотип
CVE-2023-42115

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

CVSS3: 9.8
12%
Средний
около 3 лет назад
nvd логотип
CVE-2023-42115

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. The specific flaw exists within the smtp service, which listens on TCP port 25 by default. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-17434.

CVSS3: 9.8
12%
Средний
больше 2 лет назад
debian логотип
CVE-2023-42115

Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. Thi ...

CVSS3: 9.8
12%
Средний
больше 2 лет назад
fstec логотип
BDU:2023-06268

Уязвимость cлужбы smtp почтового сервера Exim, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
12%
Средний
около 3 лет назад
suse-cvrf логотип
openSUSE-SU-2023:0293-1

Security update for exim

около 3 лет назад
suse-cvrf логотип
openSUSE-SU-2024:0007-1

Security update for exim

почти 3 года назад
redos логотип
ROS-20240404-17

Множественные уязвимости exim

CVSS3: 9.8
больше 2 лет назад
altlinux логотип
ALT-PU-2023-7644

ALT-PU-2023-7644: package `exim` update to version 4.97-alt1

CVSS3: 9.8
почти 3 года назад
altlinux логотип
ALT-PU-2026-11576

ALT-PU-2026-11576: package `exim` update to version 4.99.3-alt1

CVSS3: 9.8
4 месяца назад

Уязвимостей на страницу