Vulnerability in University Of Cambridge Exim
CVE-2005-0021
Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.
EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.
Affected products
- University_of_cambridge Exim — versions 4.41, 4.42
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_IDEFENSE, Vendor Advisory, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN, Vendor Advisory)
- cve@mitre.org (x_refsource_IDEFENSE, Exploit, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)