exploit/unix/smtp/exim4_string_format
weaponizedExim4 string_format Function Heap Buffer Overflow
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-4345US | high7.8OT critical | KEV | ||
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that cont… | ||||
| CVE-2010-4344US | critical9.8OT critical | KEV | ||
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MA… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan