martinclauss/exim-rce-cve-2018-6789

PoC

This repository provides a learning environment to understand how an Exim RCE exploit for CVE-2018-6789 works.

view exploit source poc_in_githubauthor martinclausspublished 2020-03-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6789US	critical9.8OT critical	82.1% (100th)	KEV	2018-02-08
An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to exec…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.