EDB-16925
functionalExim4 < 4.69 - string_format Function Heap Buffer Overflow (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2010-12-16catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2010-4345US | high7.8OT critical | KEV | ||
Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that cont… | ||||
| CVE-2010-4344US | critical9.8OT critical | KEV | ||
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MA… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan